config global-dns-server dsset-info-list

Use this command to paste in the content of the DSSET files provided by child domain servers or stub domains.

If you enable DNSSEC, secure communication between the FortiADC DNS server and any child DNS servers is based on keys contained in delegation signer files (DSSET files). In DNSSEC deployments, DSSET files are generated automatically when the zone is signed by DNSSEC.

Note: You use the Global DNS zone configuration to generate the DSSET file for this server. The file generated by the zone configuration editor is the one you give to any parent zone or the registrar of your domain.

Before you begin:

• You must have a good understanding of DNSSEC and knowledge of the DNS deployment in your network.
• You must have used DNSSEC to sign the child domain servers and have downloaded the DSset files to a location you can reach from your management computer.
• You must have read-write permission for global load balancing settings.

Syntax

config global-dns-server dsset-info-list

edit <name>

set filename <string>

set content <string>

next

end

filename	Specify the filename. The convention is dsset-<domain>, for example, dsset-example.com.
content	Specify (paste) the DSset file content. The content of DSset files is similar to the following: dns.example.com. IN DS 13447 5 1 A5AD9EFB6840F58CF817F3CC7C24A7ED2DD5559C