dnssec key-rollover¶

DNSSEC Key rollover

key-rollover Specification¶

Parameter Value

Type operational

Element Name key-rollover

Element URI /axapi/v3/dnssec/key-rollover

Element Attributes key-rollover_attributes

Partition Visibility shared

Schema key-rollover schema

Operations Allowed:

Operation	Method	URI	Payload
EXECUTE Object	POST	/axapi/v3/dnssec/key-rollover	key-rollover attributes

key-rollover attributes¶

dnssec-key-type

Description ‘ZSK’: Zone Signing Key; ‘KSK’: Key Signing Key;

Type: string

Supported Values: ZSK, KSK

ds-ready-in-parent-zone

Description DS RR is already ready in the parent zone

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

ksk-start

Description start KSK rollover in emergency mode

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

zone-name

Description Specify the name for the DNS zone

Type: string

Maximum Length: 127 characters

Maximum Length: 1 characters

zsk-start

Description start ZSK rollover in emergency mode

Type: boolean

Supported Values: true, false, 1, 0

Default: 0