Use the key statement to define the key name
and key file to use when creating signatures for specifying transaction
signatures (TSIGs) for zone updates and zone transfers.
Syntax
>>-key --key_label--| Put Braces and Parameters on Separate Lines |-><
Put Braces and Parameters on Separate Lines
|--{--keyfile file_name--}--------------------------------------|
Parameters
- key
- The keyword that defines the beginning of the key statement.
- key_label
- A string 1 - 32 characters in length for the label of the key
used in creating signatures. This name is referenced by the update_key
or transfer_key keywords on a dns statement in the automated domain
name registration application configuration file.
- keyfile file_name
- The file that contains the shared secret used in creating signatures.
Rules: - The file_name value must be a fully
qualified name of a z/OS® UNIX file.
- Both the .key and the .private key files generated by the dnssec-keygen
utility must be available for TSIG authentication to work correctly,
even though only the .key key file name is specified by the file_name value.
- The file name is case sensitive. For TSIG authentication to work
properly, the file name extensions must be .key and .private.