The key name must be specified in domain name format, but can otherwise be anything you wish.

The RFC recommendation is to use a name which identifies both the client and the server, for example, "client.domain1.server.domain2".

However, it does not have to be part of, or related to, any real domain name. It works just as fine, and is probably easier, using just a simple name like "robert".

 

A base 64 encoded binary value.

Click the "Generate" button to create a random or pass phrase based value.

Using a pass phrase based value makes it easier to copy the key to a client application which has the same function, but it also potentially makes the key value easier to guess.

 

Specify which local domain names clients with this key are allowed to update.