diff -rNu3 opendnssec-1.4.6/GETSTARTED opendnssec-1.4.6.new/GETSTARTED
--- opendnssec-1.4.6/GETSTARTED	1970-01-01 01:00:00.000000000 +0100
+++ opendnssec-1.4.6.new/GETSTARTED	2014-09-23 08:20:07.000000000 +0200
@@ -0,0 +1,22 @@
+For detailed instructions please see
+https://wiki.opendnssec.org/display/DOCS/Getting+Started
+
+Quick start:
+1. Get HSM module with PKCS#11 interface. You can use SoftHSM package.
+
+2. Configure SoftHSM v2:
+2.1. Check /etc/softhsm2.conf and optionally change paths if necessary
+2.2. Make up your own PIN and SO PIN!
+2.3. Initialize SoftHSM token:
+$ softhsm2-util --init-token --slot 0 --label "OpenDNSSEC" \
+    --pin 5678 --so-pin 9012
+2.4. Allow OpenDNSSEC user to access SoftHSM data:
+    $ chown -R ods: <path from /etc/softhsm2.conf>
+
+3. Configure OpenDNSSEC:
+3.1. Write token PIN to /etc/opendnssec/conf.xml
+3.2. Review and modify Key and Signing Policy in /etc/opendnssec/kasp.xml
+3.3. Initialize OpenDNSSEC database:
+    $ ods-ksmutil setup
+
+4. Use OpenDNSSEC - see man ods-ksmutil