# Create domain's DNSSEC zone key

This function generates a DNSSEC zone key for a domain.



* Only servers that run PowerDNS can use DNSSEC. If you call this function on
a server that doesn't use PowerDNS, you will receive an error.
* After you enable DNSSEC on the domain, you  add the Delegation of Signing (DS)
records to your zone record and your registrar.
* You  modify the DNSSEC security key. To make any changes, you  disable,
delete, and re-create the DNSSEC security key.

Endpoint: GET /add_zone_key
Version: 11.134.0.5
Security: BasicAuth

## Query parameters:

  - `algo_num` (integer, required)
    The algorithm that the system uses to generate the security key.

*  — RSA/SHA-1
*  — DSA-NSEC3-SHA1
*  — RSA SHA1-NSEC3-SHA1
*  — RSA/SHA-256
*  — ECDSA Curve P-256 with SHA-256
*  — ECDSA Curve P-384 with SHA-384



We recommend that you use a  (ECDSA Curve P-256 with SHA-256) value if
your registrar supports it.
    Enum: 5, 6, 7, 8, 13, 14

  - `domain` (string, required)
    The domain for which to enable DNSSEC.
    Example: "example.com"

  - `key_type` (string, required)
    The type of security key to add.

*  — Key Signing Key.
*  — Zone Signing Key.



You  call these values in lowercase.
    Example: "ksk"

  - `active` (integer)
    Whether to activate the new security key.

*  — Activate.
*  — Do  activate.
    Enum: 0, 1

  - `key_size` (integer)
    The security key size, in bits.



This parameter defaults to the following values, depending on the 
and  values:

*  = 
  *  = 
  *  = 
*  = 
  *  = 
  *  = 
*  = 
  *  = 
  *  = 
*  = 
  *  = 
  *  = 
*  = 
  *  and  = 
*  = 
  *  and  =
    Enum: 256, 384, 1024, 2048

## Response 200 fields (application/json):

  - `data` (object)

  - `data.new_key_id` (string)
    The security key's ID.
    Example: "1"

  - `metadata` (object)

  - `metadata.command` (string)
    The method name called.
    Example: "add_zone_key"

  - `metadata.reason` (string)
    The reason the API function failed when the  field is . This field may display a success message when a function succeeds.
    Example: "OK"

  - `metadata.result` (integer)
    *  — Success.
*  — Failed. Check the  field for more details.
    Enum: 0, 1

  - `metadata.version` (integer)
    The version of the API function.
    Example: 1