DNSSEC key generation -With example

Well i am trying to configure DDNS with rndc key.

The tool which used for genrate key is   dnssec-keygen

Below the command which i used to create Key.

 Under keys folder.

PWD:- /var/named/chroot/etc/keys

#  dnssec-keygen -a hmac-md5 -b 256 -n HOST dhcpupdate 

-b (bit-length)

dhcpupdate = Key-file-name

[root@***1ns01 keys]# ls -l
total 8
-rw------- 1 root root  74 Oct  9 14:10 Kdhcpupdate.+157+13480.key
-rw------- 1 root root 101 Oct  9 14:10 Kdhcpupdate.+157+13480.private
 
[root@***1ns01 keys]# cat Kdhcpupdate.+157+13480.key
dhcpupdate. IN KEY 512 3 157 Eoy51Z0K3Mv/1kNnmsJyFx*******************SWI=
 
[root@****1ns01 keys]# cat Kdhcpupdate.+157+13480.private
Private-key-format: v1.2
Algorithm: 157 (HMAC_MD5)
Key: Eoy51Z0K3Mv/1kNnmsJyFx******************SWI=





 Imp Note:-

named.conf    should be updated.  like this


key "**********" {
  algorithm hmac-md5;
  secret "Eoy51Z0K3Mv/1kNnmsJyFx*******************SWI=";
};