1DNSSEC-IMPORTKEY(8)                  BIND9                 DNSSEC-IMPORTKEY(8)
2
3
4

NAME

6       dnssec-importkey - Import DNSKEY records from external systems so they
7       can be managed.
8

SYNOPSIS

10       dnssec-importkey [-f filename] [-K directory] [-P date/offset]
11                        [-D date/offset] [-h] [-v level] [keyname]
12

DESCRIPTION

14       dnssec-importkey read a DNSKEY record and generated a .key/.private key
15       pair. Publication (-P) and deletions (-D) times can be set for the key.
16

OPTIONS

18       -f filename
19           Filename to read the key from.
20
21       -K directory
22           Sets the directory in which the key files are to reside.
23
24       -L ttl
25           Sets the default TTL to use for this key when it is converted into
26           a DNSKEY RR. If the key is imported into a zone, this is the TTL
27           that will be used for it, unless there was already a DNSKEY RRset
28           in place, in which case the existing TTL would take precedence.
29           importkey the default TTL to 0 or none removes it.
30
31       -h
32           Emit usage message and exit.
33
34       -v level
35           Sets the debugging level.
36

TIMING OPTIONS

38       Dates can be expressed in the format YYYYMMDD or YYYYMMDDHHMMSS. If the
39       argument begins with a '+' or '-', it is interpreted as an offset from
40       the present time. For convenience, if such an offset is followed by one
41       of the suffixes 'y', 'mo', 'w', 'd', 'h', or 'mi', then the offset is
42       computed in years (defined as 365 24-hour days, ignoring leap years),
43       months (defined as 30 24-hour days), weeks, days, hours, or minutes,
44       respectively. Without a suffix, the offset is computed in seconds. To
45       unset a date, use 'none'.
46
47       -P date/offset
48           Sets the date on which a key is to be published to the zone. After
49           that date, the key will be included in the zone but will not be
50           used to sign it.
51
52       -D date/offset
53           Sets the date on which the key is to be deleted. After that date,
54           the key will no longer be included in the zone. (It may remain in
55           the key repository, however.)
56

SEE ALSO

58       dnssec-keygen(8), dnssec-signzone(8), BIND 9 Administrator Reference
59       Manual, RFC 5011.
60

AUTHOR

62       Internet Systems Consortium
63

65       Copyright © 2013 Internet Systems Consortium, Inc. ("ISC")
66
67
68
69BIND9                           August 30, 2013            DNSSEC-IMPORTKEY(8)
Impressum