Using a PCIe HSM card with BIND

[Sergio Ramirez]

Hi,
    We need to integrate a "Thales Luna HSM PCIe 7" card, that we just purchased, with the most updated BIND version that works in this scenario.
    
We had followed carefully the instructions given by the Thales documents but we had not succefull results. Also, we had contacted the Thales premium technical support services but this services are poor, and at the moment they did not give us a solution. 

For this reason we would like to ask you, if someone has expirience integrating BIND with Thales HSM card with newer versions (in the past we had done this integration succefully with older BIND versions and older Thales HSM cards).

The versions that we are using now are:

Linux 6.1.0-25-amd64 #1 SMP PREEMPT_DYNAMIC Debian 6.1.106-3 (2024-08-26) x86_64 GNU/Linux
OpenSSL 3.0.14 4 Jun 2024 (Library: OpenSSL 3.0.14 4 Jun 2024)
BIND 9.18.32 (Extended Support Version) <id:d1f1392>

HSM Luna PCIe 7 card with firmware 7.0.3.

We are very satisfied with BIND software, unfortunately  if we can not find a solution, perhaps we will need to change the DNS server software for other compatible with newer HSM Thales card.

Thanks in advance.

--
Sergio R.