{% if idn_zone_name %} {% trans %}Add key for zone{% endtrans %} "{{ idn_zone_name }}" ({{ domain_name }}) {% else %} {% trans %}Add key for zone{% endtrans %} "{{ domain_name }}" {% endif %}

{% if pdns_caps and pdns_caps.isKnown and not pdns_caps.supportsDefaultCsk %}

{% trans %}Legacy PowerDNS detected{% endtrans %}

{% trans %}This server predates PowerDNS 4.0 and does not create a Combined Signing Key by default. Pick KSK or ZSK explicitly to add a key here.{% endtrans %}

{% endif %}

{% trans %}Key type{% endtrans %}

{% trans %}Select key type{% endtrans %}

{% trans %}Algorithm{% endtrans %}

{% trans %}Select algorithm{% endtrans %}

{% trans %}Bits in length{% endtrans %}

{% trans %}Select bits length{% endtrans %}

{% trans %}About DNSSEC Key Types{% endtrans %}

{% trans %}Key Types Explained{% endtrans %}

CSK - {% trans %}Combined Signing Key - serves as both KSK and ZSK (recommended for PowerDNS 4.0+){% endtrans %}
KSK - {% trans %}Key Signing Key - signs the DNSKEY records in the zone{% endtrans %}
ZSK - {% trans %}Zone Signing Key - signs all other records in the zone{% endtrans %}

{% trans %}Recommended Settings{% endtrans %}

{% trans %}For modern deployments, ECDSA (algorithm 13, ECDSAP256SHA256) with 256 bits provides strong security with better performance.{% endtrans %}