Specifies whether this is a key signing key (KSK) or a zone signing key (ZSK). Key signing keys have the Secure Entry Point flag set and, when active, are only used to sign resource record sets of type DNSKEY. Zone signing keys do not have the Secure Entry Point flag set and are used to sign all other types of resource record sets.
[[["Easy to understand","easyToUnderstand","thumb-up"],["Solved my problem","solvedMyProblem","thumb-up"],["Other","otherUp","thumb-up"]],[["Hard to understand","hardToUnderstand","thumb-down"],["Incorrect information or sample code","incorrectInformationOrSampleCode","thumb-down"],["Missing the information/samples I need","missingTheInformationSamplesINeed","thumb-down"],["Other","otherDown","thumb-down"]],["Last updated 2025-05-19 UTC."],[[["\u003cp\u003eThe content details parameters for generating DNS keys, crucial for creating new ManagedZones and adding new DnsKeys.\u003c/p\u003e\n"],["\u003cp\u003eKey parameters include \u003ccode\u003ekeyType\u003c/code\u003e, which designates whether the key is a Key Signing Key (KSK) or a Zone Signing Key (ZSK).\u003c/p\u003e\n"],["\u003cp\u003eThe \u003ccode\u003ealgorithm\u003c/code\u003e parameter specifies the DNSSEC algorithm, and \u003ccode\u003ekeyLength\u003c/code\u003e defines the key's length in bits.\u003c/p\u003e\n"],["\u003cp\u003eThe representation of these parameters is shown in a JSON object, including these three parameters along with \u003ccode\u003ekind\u003c/code\u003e.\u003c/p\u003e\n"]]],[],null,["# DnsKeySpec\n\n- [JSON representation](#SCHEMA_REPRESENTATION)\n\nParameters for DnsKey key generation. Used for generating initial keys for a new ManagedZone and as default when adding a new DnsKey."]]
