Man page - tsig-keygen(8)

Packages contains this manual

Package:  bind9
apt-get install bind9

Manuals in package:
• named-nzd2nzf(1)
• filter-a(8)
• named(8)
• nsec3hash(1)
• filter-aaaa(8)
• ddns-confgen(8)
• tsig-keygen(8)
• named.conf(5)
• rndc.conf(5)
• arpaname(1)
• dnssec-importkey(1)
• named-rrchecker(1)
• named-journalprint(1)
Documentations in package:
• bind9

Manual

TSIG-KEYGEN

NAME
SYNOPSIS
DESCRIPTION
OPTIONS
SEE ALSO
Author
Copyright

---

NAME

tsig-keygen - TSIG key generation tool

SYNOPSIS

tsig-keygen [ -a algorithm] [ -h ] [name]

DESCRIPTION

tsig-keygen is an utility that generates keys for use with TSIG (Transaction Signatures) as defined in RFC 2845 <https://datatracker .ietf.org/doc/html/rfc2845.html>. The resulting keys can be used, for example, to secure dynamic DNS updates to a zone, or for the rndc <# std-iscman-rndc> command channel.

A domain name can be specified on the command line to be used as the name of the generated key. If no name is specified, the default is tsig-key .

OPTIONS

-a algorithm

This option specifies the algorithm to use for the TSIG key. Available choices are: hmac-md5, hmac-sha1, hmac-sha224, hmac-sha256, hmac-sha384, and hmac-sha512. The default is hmac-sha256. Options are case-insensitive, and the "hmac-" prefix may be omitted.

-h

This option prints a short summary of options and arguments.

SEE ALSO

nsupdate(1) <#std-iscman-nsupdate>, named.conf(5) <#std-iscman-named .conf>, named(8) <#std-iscman-named>, BIND 9 Administrator Reference Manual.

Author

Internet Systems Consortium

Copyright

2026, Internet Systems Consortium

---