Enable or disable automatic DNSSEC key generation for all zones in a configuration.
When you sign a DNS zone or reverse zone, key generation is enabled automatically.
Normally, automatic key generation should be left enabled. Disable automatic key
generation only when you want to manually control the generation and rollover of
DNSSEC keys.
To enable/disable automatic key generation:
-
Select the Global tab in the sidebar, then select
Configurations.
-
Select the name of a configuration from the Configurations table.
-
From the configuration name menu in the details page for the
configuration, select DNSSEC auto generate key.
-
Under General, do one of the following:
- To disable automatic key generation, clear the
Activate key auto generate checkbox.
- To enable automatic key generation, select the
Activate key auto generate checkbox.
-
In the Change control
section, add comments if required.
-
Select Update settings.