IONOS Cloud DNS Service

Manage IONOS Cloud DNS zones, records, DNSSEC, and reverse DNS. Developped with Love by Ascenzia (ascenzia.fr)

AI-generated

Summary

Create DNSSEC keys for an IONOS Cloud DNS zone.

zoneId (required) — The unique ID (UUID) of the zone for DNSSEC operations
dnssecAlgorithm — The DNSSEC signing algorithm
dnssecKskBits — Key Signing Key length in bits. Must be >= ZSK Bits.
dnssecZskBits — Zone Signing Key length in bits. Must be <= KSK Bits.
dnssecNsecMode — NSEC mode for DNSSEC
dnssecNsec3Iterations — Number of iterations for NSEC3 (between 0 and 50)
dnssecNsec3SaltBits — Salt length in bits for NSEC3 (between 64 and 128, multiples of 8)
dnssecValidity — Signature validity in days (between 90 and 365)

The created DNSSEC key details returned by the IONOS API, including key identifier, parameters, and metadata.

The operation returns the API response body from POST /zones/{zoneId}/keys.