NameSurfer Suite
The keys page
FusionLayer

NameSurfer 7.6.4.1


The keys are kept in the database. Any created key is valid and ready to be used without restarting the system.

Rights to the key information is given on the group page and they apply for the members of that particular group.

The keys page contains the following columns:

  • The name of the key which functions as the link to the key data page.
  • The key type can be either TSIG or NSAPI and it is chosen at the start of the creation of a new key.
  • The validity period of the key.

The TSIG keys

The TSIG keys are in use in FusionLayer NameSurfer since version 5.0, coexisting with the shared secret that resides in the $NS/db/secrets file. Anyone who gains knowledge of the keys can make changes to the DNS data, even remotely by TCP or UDP. The user can decide whether a key can be used for DNS updates.

The NSAPI keys

The NSAPI keys are in use in FusionLayer NameSurfer since version 5.6. These keys are used by clients for signing data sent to the NSAPI-daemon and is the primary authentication mechanism.