PHP 5 CreateDnsSecKey

Always get the right IP-address

DNSSEC is an extension to DNS that enables clients (like a web browser) to make sure that it is accessing the domain that wants to access.

DNSSEC was designed to protect clients from forged DNS data.

When a DNSSEC-enabled name server is responding to a query for a domain that is DNSSEC-enabled, it digitally signs the response, allowing the client to verify the authenticity of the response. AWS allows you to register domains that are DNSSEC-enabled with the NIC. Note that the relevant NIC needs to support DNSSEC for this to happen.

You do this by creating DNSSEC Key Objects (handles), and you then specify up to five of these on your orders.

At the time of writing, AWS only supports DNSSEC for .SE, .FI, .EU, .NL.

Refer to the relevant TLD Kits for additional information. Also see the documentation for the DnsSecKey object in this document.

Additional reading:

Response CreateDnsSecKey(string $sessionId,DnsSecKey $dnsSecKey)

Response codes

401Authorization failed
501Syntax error in parameters or arguments
506Required attribute missing in request

CreateDnsSecKey request

sessionIdExample: o58t9fjgw9bjarp6q7byv13e



PHP 5 example

$wsdl = "";
//$wsdl = "";
$client = new SoapClient($wsdl,array( "trace" => 1 ));


$dnsSecKey= array(
	"DigestAlgorithm" => "RSA-SHA256",
	"DigestType" => "SHA-256",
	"Digest" => "846E5ED4AB6788032B89393619752F662CF2B7B2046A8EC0804DF88F1469AC1E",
	"KeyTag" => "2224"

$createDnsSecKey= array(
	"sessionId" => env.getSessionId(),
	"dnsSecKey" => $dnsSecKey
    $result = $client->createDnsSecKey($createDnsSecKey);
    echo "ResultCode : ".$result->CreateDnsSecKeyResult->ResultCode."\r\n";
    echo "ResultMessage : ".$result->CreateDnsSecKeyResult->Message."\r\n";
    if($result->CreateDnsSecKeyResult->Values) {
        foreach($result->CreateDnsSecKeyResult->Values as $key => $value) {
            echo $value->string."\r\n";
} catch(Exception $e) {
	echo $e->getMessage(); 

WSDL for AWS v2 (OTE) (Live)