4.1. Zone Signing Key

Managing keys is an administrative task that the BIG-IP can do automatically. In order to sign zones, we must first create keys!

Navigate to: DNS ›› Delivery : Keys : DNSSEC Key List

../../_images/dnssec-keys-create.png

Create zone signing key according the following table:

Setting Value
Name example.com_zsk
Type Zone Signing Key
Key Management Manual
Certificate default.crt
Private Key default.key
../../_images/mod4lab1-zsk.png

TMSH

tmsh create ltm dns dnssec key example.com_zsk key-type zsk certificate-file default.crt key-file default.key