nConfiguring secure transfers between servers
with TSIG
u1. Generate a key
using ÒDNSSEC-keygenÓ
u2. Communicate key
with your partner (off-band, PGPÉ)
u3. Configure your server to require the key for
zone transfers
FÒkeyÓ
statement to configure the key
FÒallow-transferÓ statement in the ÒzoneÓ
statement
Ftip: use Òinclude <file_name>Ó
u4. Have your partners configure their servers to
use the key when talking to
you
FUsing the ÒserverÒ
statement