Use the key statement to define the key name and key file to use when creating signatures for specifying transaction signatures (TSIGs) for zone updates and zone transfers.
Syntax
>>-key --key_label--| Put Braces and Parameters on Separate Lines |->< Put Braces and Parameters on Separate Lines |--{--keyfile file_name--}--------------------------------------|
Parameters
- key
- The keyword that defines the beginning of the key statement.
- key_label
- A string 1 - 32 characters in length for the label of the key used in creating signatures. This name is referenced by the update_key or transfer_key keywords on a dns statement in the automated domain name registration application configuration file.
- keyfile file_name
- The file that contains the shared secret used in creating signatures.
Rules:
- The file_name value must be a fully qualified name of a z/OS® UNIX file.
- Both the .key and the .private key files generated by the dnssec-keygen utility must be available for TSIG authentication to work correctly, even though only the .key key file name is specified by the file_name value.
- The file name is case sensitive. For TSIG authentication to work properly, the file name extensions must be .key and .private.