[dns-operations] Destroying HSMs

Paul Hoffman phoffman at proper.com
Thu Feb 1 00:10:30 UTC 2018


(It is rare that I get to create click-bait subject lines that are fully 
accurate...)

At next weeks key ceremony, ICANN is also planning to physically destroy 
two HSMs that have already been put out of commission. The earlier step 
was to zeroize them using the HSM manufacturer's instructions, and this 
next step can be thought of as "physically zerioizing" them before 
removing them from the secure facility.

Some people on this list have a love/hate relationship with HSMs and 
might enjoy watching the process of two of them being destroyed. The 
information about the ceremony, including the proposed script for 
destruction, are here:

https://www.iana.org/dnssec/ceremonies/32

--Paul Hoffman



More information about the dns-operations mailing list