Key groups

It is possible to group several DNSSEC keys into one key group. This can facilitate the management of domain names and their DNSSEC keys.

Search

You can search for the key groups in your portfolio. Leaving all fields empty and clicking on the search button, will give you an alphabetical list of your key groups in blocks of 20. Of course, it would be better to download a report if you want a list of all your key groups.

Search for a key group

To search for a key group:

• Click on ‘Key groups’ in the left menu.

• You will see the search screen immediately.

You can search key groups by entering part of the group name. If you know which one you are looking for, you can select exact match.

After clicking ‘Search’, you will get a list of key groups matching the search criteria.

Result of the search

The result list displayed has 2 columns:

• The name of the key group.

• The number of keys in the key group.

Some column titles are links, it is possible to sort the search results by clicking on the column title. The result of your search can be exported to an Excel or csv file.

You can view the details of a key group by clicking its name. The next screen shows the keys for that key group and gives you some links relevant to the key group, i.e. update, delete, history and connected domain names. Clicking on ‘Connected domain names’ will show a new search result from the search domain screen with all domain names connected to this key group.

To see the details of the DNSSEC keys, you have to click the keytag in the details screen of the key group. A popup will appear with all the DNSKEY information: Key tag, flags, protocol, algorithm and public key.

New

In this section you can create a key group.

Create a new key group

To create a key group:

• Click on ‘Key groups’ in the left menu.

• Click ‘New’.

Required fields are marked with an asterisk (*).

The group name is a name of your choice.

You can add up to 4 keys to one group by clicking ‘New’ next to Keys. A pop-up screen will appear to ‘Add a DNSKEY’. The entries necessary for the keys, are available to you after you sign your own zone. You can enter the appropriate values here. When you click ‘Create’ in the pop-up screen, DNS Belgium will check your keys. If any of the fields are wrong, you will receive an error message. You can correct the relevant field immediately without having to enter all fields again.

After adding all the keys you want, click on the ‘Create’ button. You will then receive confirmation that the transaction was successful.

Update

You need to find the key group before you can change it. This can be done via ‘search’ under the menu item ‘Key groups’.

After submitting your search, you will see a list of key groups matching your search criteria.

Choose the one you want to modify by clicking on its name.

To update the information of the key group, click on ‘Update’, make the appropriate changes and submit it as in the creation of a new name server group.

Delete

Find the key group via search key groups.

To delete it, click on ‘Delete’, sign the transaction and submit it.

Key groups that are still linked to a domain name cannot be deleted.

If you want to know to which domain name(s) the key group is still linked, you can return to the key group view and click on ‘Connected domain names’.