dnssec keys how to

Awd

Verified User
Joined
Aug 9, 2015
Messages
316
Hello,

I have enabled dnssec in Directadmin.
at my provider I can add dnssec keys, but I have no idea what exactly to fill in.
Do I have to add KSK and ZSK both or only the key for KSK?
Witch algorithm do I have to set?

Key tag: I assume the Key ID
Algorithm ?
Flags_ KSK or ZSK or both?
Public key: AwEAAar4XmCenRNPiob5EVqprRcCbsKrYoX1gGSd7d5I71b65YLWCDUi qt1tihnrgGmS0t4bnE4VTTrLLnyIltVi3Do0kvWvIcJ0miYfWfvT0VP5 1q/wbrOhW5pnO7nhofBRnCV4aHNq3OqOILANRTqsagSSdspNlJhFV8Qw zdT8RTD

example of zsk key in directadmin
DNSKEY 256 3 8 AwEAAar4XmCenRNPiob5EVqprRcCbsKrYoX1gGSd7d5I71b65YLWCDUi qt1tihnrgGmS0t4bnE4VTTrLLnyIltVi3Do0kvWvIcJ0miYfWfvT0VP5 1q/wbrOhW5pnO7nhofBRnCV4aHNq3OqOILANRTqsagSSdspNlJhFV8Qw zdT8RTD

Thanks
Fred
 
Hello Fred,

The requirements differ from zone to zone (TLD). So you need to consult with your registrar.
 
Yes, I did. For me it was enough to publish the KSK key.
Key tag: Key ID
Algorithm RSA-SHA 256(8)
Flags_ KSK
Public key: the key generated through directadmin, don´t forget to remove whithespaces and to sign them.
 
Back
Top