Index

Symbols

"[::1]:4539"] command line option "[::1]:4540"] command line option "[::1]:4541"] command line option "[::1]:4542"] command line option --ca-cert command line option --check-config command line option --client-cert command line option --client-key command line option --config command line option --connect-timeout command line option --continue command line option --daemonize command line option --detailed command line option --force command line option --help command line option, [1], [2], [3], [4] --import-csk-file command line option --import-csk-kmip command line option --import-ksk-file command line option --import-ksk-kmip command line option --import-public-key command line option --import-zsk-file command line option --import-zsk-kmip command line option --insecure command line option --key-label-max-bytes command line option --key-label-prefix command line option --level command line option --log command line option --log-level command line option, [1] --max-response-bytes command line option --password command line option

--policy command line option --port command line option --read-timeout command line option --server command line option --server-cert command line option --source command line option --state command line option --trace-targets command line option --username command line option --version command line option, [1] --write-timeout command line option -c command line option -d command line option -h command line option, [1], [2], [3], [4] -l command line option, [1] -s command line option -V command line option, [1] <--unsigned|--signed> command line option, [1], [2] <ALGORITHM> command line option <enable|disable> command line option <IP_HOST_OR_FQDN> command line option <KEY> command line option <NAME> command line option, [1], [2], [3], [4], [5], [6], [7], [8] <SECRET> command line option <SERIAL> command line option, [1] <SERVER_ID> command line option, [1] <TSIG_KEY_NAME> command line option [<ALGORITHM>]:<TSIG_KEY_NAME>:<SECRET> command line option [RR] command line option [signer.review] command line option

A

accept-xfr-from command line option add module sub-command, [1], [2] algorithm command line option module sub-command algorithm.auto-done command line option algorithm.auto-expire command line option

algorithm.auto-report command line option algorithm.auto-start command line option Apex (Zone) approve module sub-command auto-remove command line option auto-remove-delay command line option

B

Bogus (DNSSEC State)

C

cache-expired1 module sub-command cache-expired2 module sub-command cascade-debug(1) cascade-health(1) cascade-hsm(1) cascade-keyset(1) cascade-policy(1) cascade-template(1) cascade-tsig(1) cascade-zone(1) cds.signature-inception-offset command line option cds.signature-lifetime command line option cds.signature-remain-time command line option change-logging module sub-command Child (Zone) cmd-hook command line option Combined signing key (CSK) command line option "[::1]:4539"] "[::1]:4540"] "[::1]:4541"] "[::1]:4542"] --ca-cert --check-config --client-cert --client-key --config --connect-timeout --continue --daemonize --detailed --force --help, [1], [2], [3], [4] --import-csk-file --import-csk-kmip --import-ksk-file --import-ksk-kmip --import-public-key --import-zsk-file --import-zsk-kmip --insecure --key-label-max-bytes --key-label-prefix --level --log --log-level, [1] --max-response-bytes --password --policy --port --read-timeout --server --server-cert --source --state --trace-targets --username --version, [1] --write-timeout -c -d -h, [1], [2], [3], [4] -l, [1] -s -V, [1] <--unsigned|--signed>, [1], [2] <ALGORITHM> <enable|disable> <IP_HOST_OR_FQDN> <KEY> <NAME>, [1], [2], [3], [4], [5], [6], [7], [8] <SECRET> <SERIAL>, [1] <SERVER_ID>, [1] <TSIG_KEY_NAME> [<ALGORITHM>]:<TSIG_KEY_NAME>:<SECRET> [RR] [signer.review] accept-xfr-from algorithm algorithm.auto-done algorithm.auto-expire algorithm.auto-report algorithm.auto-start auto-remove auto-remove-delay cds.signature-inception-offset cds.signature-lifetime cds.signature-remain-time cmd-hook csk.auto-done csk.auto-expire csk.auto-report csk.auto-start csk.validity daemonize dnskey.signature-inception-offset dnskey.signature-lifetime dnskey.signature-remain-time dnst-binary-path ds-algorithm hook hsm-server-id identity key-roll-time keys-dir kmip-credentials-store-path kmip-server-state-dir ksk.auto-done ksk.auto-expire ksk.auto-report ksk.auto-start ksk.validity log-level log-target, [1], [2], [3] mode on-reject opt-out path pid-file policy-dir publication-nameservers required send-notify-to serial-policy servers, [1], [2], [3] signature-inception-offset signature-lifetime signature-refresh-interval signature-remain-time tsig-store-path ttl type use-csk version, [1] zone-state-dir zsk.auto-done zsk.auto-expire zsk.auto-report zsk.auto-start zsk.validity

config module sub-command csk module sub-command csk.auto-done command line option csk.auto-expire command line option csk.auto-report command line option csk.auto-start command line option csk.validity command line option

D

daemonize command line option dnskey.signature-inception-offset command line option dnskey.signature-lifetime command line option dnskey.signature-remain-time command line option

DNSSEC Policy (DP) DNSSEC Practice Statement (DPS) dnst-binary-path command line option ds-algorithm command line option

G

get module sub-command

H

Hardware security module (HSM) history module sub-command

hook command line option hsm-server-id command line option

I

identity command line option

Indeterminate (DNSSEC State) Insecure (DNSSEC State) Insecure delegation

K

Key signing key (KSK) key-roll-time command line option keys-dir command line option kmip-credentials-store-path command line option kmip-server-state-dir command line option ksk module sub-command

ksk.auto-done command line option ksk.auto-expire command line option ksk.auto-report command line option ksk.auto-start command line option ksk.validity command line option

L

list module sub-command, [1], [2], [3] log-level command line option

log-target command line option, [1], [2], [3]

M

mode command line option module sub-command add, [1], [2] algorithm approve cache-expired1 cache-expired2 change-logging config csk get history ksk list, [1], [2], [3] override policy propagation1-complete propagation2-complete reject reload, [1] remove, [1] remove-key reset roll-done show, [1] start-roll status zsk

N

NSEC

NSEC3

O

on-reject command line option Online signing Opt-out

opt-out command line option Origin (Zone) override module sub-command

P

Parent (Zone) path command line option pid-file command line option policy module sub-command policy-dir command line option

Primary server propagation1-complete module sub-command propagation2-complete module sub-command publication-nameservers command line option

R

Recursive resolver reject module sub-command reload module sub-command, [1] remove module sub-command, [1] remove-key module sub-command required command line option reset module sub-command Resource Record Set (RRset) RFC RFC 0882, [1] RFC 1034, [1], [2], [3] RFC 1034 Section 2.4 RFC 1035, [1], [2] RFC 1035 Section 3.2.1 RFC 1035 Section 4.1.3 RFC 1035 Section 5.1 RFC 1995, [1] RFC 1996, [1], [2], [3], [4], [5], [6] RFC 1996 Section 2.1, [1] RFC 2136 RFC 2181, [1], [2] RFC 2181 Section 5 RFC 2181 Section 5.2 RFC 2181 Section 6 RFC 2181 Section 8 RFC 2182 RFC 2308 RFC 3757, [1] RFC 4033 RFC 4033 Section 10 RFC 4033 Section 2, [1], [2], [3], [4] RFC 4033 Section 3.1 RFC 4033 Section 3.2 RFC 4033 Section 5, [1], [2], [3], [4] RFC 4034, [1], [2] RFC 4034 Section 4 RFC 4035, [1] RFC 4035 Section 2 RFC 4035 Section 4.3, [1], [2], [3], [4] RFC 4035 Section 5 RFC 4035 Section 5.2 RFC 4035 Section 5.3 RFC 4470 RFC 4648, [1] RFC 4697 RFC 4956 Section 2 RFC 5155, [1], [2], [3] RFC 5155 Section 1.3 RFC 5155 Section 3.1.2.1 RFC 5936, [1] RFC 6781 RFC 6781 Section 3.1, [1], [2] RFC 6781 Section 3.2.3 RFC 6840, [1] RFC 6841 Section 2, [1] RFC 7129 RFC 7129 Section 5.1 RFC 7344 Section 1.1, [1] RFC 8078 RFC 8080 RFC 819 RFC 8624 RFC 8945, [1], [2] RFC 9364 RFC 9499

roll-done module sub-command

S

Secondary server Secure (DNSSEC State) Secure Entry Point (SEP) send-notify-to command line option serial-policy command line option servers command line option, [1], [2], [3] show module sub-command, [1] signature-inception-offset command line option

signature-lifetime command line option signature-refresh-interval command line option signature-remain-time command line option Signed zone start-roll module sub-command status module sub-command

T

Trust anchor tsig-store-path command line option TTL

ttl command line option type command line option

U

Unsigned zone

use-csk command line option

V

Validating resolver Validation

version command line option, [1]

Z

Zone Zone enumeration Zone signing key (ZSK) Zone transfer zone-state-dir command line option zsk module sub-command zsk.auto-done command line option

zsk.auto-expire command line option zsk.auto-report command line option zsk.auto-start command line option zsk.validity command line option