create

Enable DNSSEC keys and create associated DNSKEY records for your DNS zone

Usage

ionosctl dns dnssec create [flags]

Aliases

For dnssec command:

[sec dnskey key keys]

For create command:

[c post]

Description

Enable DNSSEC keys and create associated DNSKEY records for your DNS zone

Options

      --algorithm string       Algorithm used to generate signing keys (both Key Signing Keys and Zone Signing Keys) (default "RSASHA256")
  -u, --api-url string         Override default host URL (default "https://dns.de-fra.ionos.com")
      --cols strings           Set of columns to be printed on output 
                               Available columns: [Id KeyTag DigestAlgorithmMnemonic Digest Validity Flags PubKey ComposedKeyData Algorithm KskBits ZskBits NsecMode Nsec3Iterations Nsec3SaltBits] (default [Id,KeyTag,DigestAlgorithmMnemonic,Digest,Validity])
  -c, --config string          Configuration file used for authentication (default "$XDG_CONFIG_HOME/ionosctl/config.json")
  -f, --force                  Force command to execute without user input
  -h, --help                   Print usage
      --ksk-bits int           Key signing key length in bits. kskBits >= zskBits: [1024/2048/4096] (default 1024)
  -l, --location string        Location of the resource to operate on. Can be one of: de/fra
      --no-headers             Don't print table headers when table output is used
      --nsec-mode string       NSEC mode.. Can be one of: NSEC, NSEC3 (default "NSEC")
      --nsec3-iterations int   Number of iterations for NSEC3. [0..50]
      --nsec3-salt-bits int    Salt length in bits for NSEC3. [64..128], multiples of 8 (default 64)
  -o, --output string          Desired output format [text|json|api-json] (default "text")
  -q, --quiet                  Quiet output
      --validity int           Signature validity in days [90..365] (default 90)
  -v, --verbose                Print step-by-step process when running command
  -z, --zone string            The name or ID of the DNS zone (required)
      --zsk-bits int           Zone signing key length in bits. zskBits <= kskBits: [1024/2048/4096] (default 1024)

Examples

ionosctl dns keys create --zone ZONE