====== Secure AXFR with TSIG ======

===== Import TSIG Key ====

Syntax.
<code>
pdnsutil import-tsig-key NAME ALGORITHM KEY 
</code>

Example.
<code>
pdnsutil import-tsig-key foobar HMAC-SHA256 jS0fB3jI9eU1zW0sB1hQ2mK4jI8fR2dCgG4xB7mS4oG0uE5zN5oG5aS2vE7sT2dS
</code>

===== Configure Master Zone =====

Syntax.
<code>
pdnsutil activate-tsig-key ZONE NAME {master|slave}
</code>

Example.
<code>
pdnsutil activate-tsig-key example.com foobar master
</code>

If you use an external backup dns server like netnod.se, that's how you can configure it.

===== Configure Slave Zone =====

<code>
pdnsutil activate-tsig-key example.com foobar slave
</code>