Automatic key generation - BlueCat Integrity - 9.5.0

Address Manager Administration Guide

Product name
BlueCat Integrity

Enable or disable automatic DNSSEC key generation for all zones in a configuration. When you sign a DNS zone or reverse zone, key generation is enabled automatically.

Normally, automatic key generation should be left enabled. Disable automatic key generation only when you want to manually control the generation and rollover of DNSSEC keys.

To enable/disable automatic key generation:

  1. From the configuration drop-down menu, select a configuration.
  2. Select the IP Space tab. Tabs remember the page you last worked on, so select the tab again to ensure you're on the Configuration information page.
  3. From the Configuration information page, click the Details tab.
  4. Under Configuration Settings, click Define DNSSEC Auto Generate Key settings.
  5. To disable automatic key generation, deselect the Activate Key Auto Generate check box.
    To enable automatic key generation, select the Activate Key Auto Generate check box.
  6. Click Update.