Saving Implementation Costs by Simulating Deployment of DNS Security Extensions

Utimaco Rolls Out New Hardware Based DNSSEC-Solution

Aachen May, 26 2011 – A preview to an upcoming report by the Association of the German Internet Economy (ECO), entitled “Registrar Atlas 2011”, indicates that 44% percent of all internet registrars are going to implement DNSSEC this year. However, many organisations find selecting the right DNSSEC solution and its subsequent deployment turns out to be a challenge. Utimaco offers hardware security modules for DNSSEC solutions and is the only HSM manufacturer to provide a free simulator, offering a simple preliminary test drive. This simulation enables companies to customize their existing infrastructure,, and calculate the time and effort required for implementing DNSSEC up front.

Hardware security modules from Utimaco have long been used for encrypting and signing data for services such as identity management, database security and authentication, and are now also able to be used for DNS Security Extensions. “Tamper proof signing of DNS data with our SafeGuard CryptoServers was the next logical step in expanding our range of security solutions“, says Dieter Bong, Product Manager at Utimaco.

DNSSEC with Hardware Security Modules
The market for DNSSEC solutions is split into two segments, using different approaches: software-only tools; and tools with underlying hardware security modules. There are many security requirements for DNSSEC solutions that are better met by hardware-based solutions than software alone. The active tamper resistance built in to Utimaco’s hardware modules secures keys against any unwanted external manipulation. Due to their special production method, SafeGuard CryptoServers achieve the highest levels of security certification, levels 3 and 4 of the FIPS 140-2 standard. Software based tools are unable to reach these levels. In addition, hardware security modules are better able to adapt to the client’s specific levels of demand; servers are relieved from performing complex cryptographic calculations and simple scalability when performance requirements increase is guaranteed. “At the same time, we can offer our clients a transparent cost structure. There are no hidden consequential cost with our servers“, explains the Product Manager of Utimaco.

Simple Deployment Process without the Hassle

Another important consideration for domain registrars is the deployment effort. According to many clients, simple procedures for key signing and high levels of security with minimum effort are crucial requirements. Prospective customers can now test these by simulating the deployment of SafeGuard CryptoServers. “A LAN box for supporting DNSSEC on a BINDDNS server is, for example, ready for use in less than a day“, promises Bong. Next to the simulator, Utimaco also offers integration guides, a screencast and a webinar. No wonder then, the German company has chosen “Laid Back DNSSEC” as their advertising slogan.

Log-in details for the DNSSEC simulator can be obtained at hsm.utimaco.com/press/dnssec

Utimaco Safeware AG, a member of the Sophos Group, is in a world leading market position with its 25 years of experience as a supplier of professional data encryption and data security solutions. Through its worldwide network of partners and affiliates, Utimaco offers scalable solutions that meet the requirements of the international market and it benefits from the deep know-how of a fast responding service network including on-site support. Utimaco represents renowned product quality, operator convenience, excellent support and a market-driven product range.
Learn more at http://hsm.utimaco.com

Dipl.-Ing. Andreas Philipp
Head of Sales CryptoServer
Utimaco Safeware AG - A member of the Sophos Group
Germanusstr. 4
52080 Aachen, Germany

phone: +49 241 1696 – 200
fax: +49 241 1696 – 199
email: hsm@aachen.utimaco.de
web: hsm.utimaco.com

This release was published on openPR.