hi Ulrich,
I have experience with nitokey hsm (which is the same form factor as the yubikey hsm).
You need to set up pkcs11 and openct / opensc.
I might be able to take a quick look to see if any tricks are needed for a yubikey (I
expect not).
Let me know what you need.
Regards,
Tamás
Oct 2, 2025 20:43:50 Ulrich Wisser via knot-dns-users <knot-dns-users(a)lists.nic.cz>cz>:
Hello!
Has anybody here got knot to sign with a Yubikey HSM?
Asking for a friend! :-)
/Ulrich
--