# Enable NSEC3 semantics for domain

This function configures the domain to use Next Secure Record 3 (NSEC3) semantics.



Only servers that run PowerDNS can use DNSSEC. If you call this function on a server that doesn't use PowerDNS, you will receive an error.

Endpoint: GET /set_nsec3_for_domains
Version: 11.136.0.0
Security: BasicAuth

## Query parameters:

  - `domain` (string, required)
    The domain for which to enable NSEC3 semantics.
    Example: "example.com"

  - `nsec3_iterations` (integer, required)
    The number of times that the system re-executes the first resource record hash operation.
    Example: 7

  - `nsec3_narrow` (integer, required)
    Whether NSEC3 will operate in Narrow mode or Inclusive mode.

  

For information about these modes, read  PowerDNS's DNSSEC documentation.

*  - Narrow mode.
*  - Inclusive mode.
    Enum: 0, 1

  - `nsec3_opt_out` (integer, required)
    Whether the system will create records for  delegations.
*  - Create records for  delegations.
*  - Create records  for secure delegations.



Only select  if you  create records for all delegations.
    Enum: 0, 1

  - `nsec3_salt` (string, required)
    The salt value that PowerDNS uses in the hashes.

  

 For information about salt values, read  RFC 5155.
    Example: "1a2b3c4d5e6f"

## Response 200 fields (application/json):

  - `data` (object)

  - `data.domains` (array)
    An array of objects that contains information about each domain.

  - `data.domains.domain` (string)
    The domain for which the system enabled NSEC3.
    Example: "example.com"

  - `data.domains.enabled` (integer)
    Whether the system enabled NSEC3.
-  — Enabled.
-  — The system failed to enable NSEC3.
    Enum: 0, 1

  - `data.domains.error` (string)
    An error message that describes why the system could not enable NSEC3.



 The function  displays this return when the enabled return is a  value.
    Example: "Error message."

  - `metadata` (object)

  - `metadata.command` (string)
    The method name called.
    Example: "set_nsec3_for_domains"

  - `metadata.reason` (string)
    The reason the API function failed when the  field is . This field may display a success message when a function succeeds.
    Example: "OK"

  - `metadata.result` (integer)
    *  - Success.
*  - Failed. Check the field for more details.
    Enum: 0, 1

  - `metadata.version` (integer)
    The version of the API function.
    Example: 1