tsig-keygen - TSIG key generation tool
Contents
Copyright
2025, Internet Systems Consortium
9.20.11-1ubuntu1-Ubuntu 2025-07-04 TSIG-KEYGEN(8)
Description
tsig-keygen is an utility that generates keys for use with TSIG (Transaction Signatures) as defined in ‐
RFC2845. The resulting keys can be used, for example, to secure dynamic DNS updates to a zone, or for
the rndc command channel.
A domain name can be specified on the command line to be used as the name of the generated key. If no
name is specified, the default is tsig-key.
Name
tsig-keygen - TSIG key generation tool
Options
-aalgorithm
This option specifies the algorithm to use for the TSIG key. Available choices are: hmac-md5,
hmac-sha1, hmac-sha224, hmac-sha256, hmac-sha384, and hmac-sha512. The default is hmac-sha256.
Options are case-insensitive, and the "hmac-" prefix may be omitted.
-h This option prints a short summary of options and arguments.
See Also
nsupdate(1), named.conf(5), named(8), BIND 9 Administrator Reference Manual.
Synopsis
tsig-keygen [-a algorithm] [-h] [name]
