---
title: "DNSSec key rollover"
url: "https://help.internetx.com/en/api/core-dnssec-key-rollover/"
lang: "en"
section: "API reference — API reference (XML/JSON)"
breadcrumb: "API documentation (JSON/XML) > Tasks > DNSSEC tasks"
updated: "2023-09-13"
---

# DNSSec key rollover

## Function

The _DNSSecKeyRollover_ task renews the KSK key (key signing key) of a DNSSEC-signed domain.  
The KSK is automatically transmitted to the registry. A key rollover may be necessary for operational reasons or for security reasons if one or more keys have been compromised.

The last key rollover of a domain can be displayed with [DNSSEC Info.](/en/api/core-dnssec-info/) With [DNSSEC List](/en/api/core-dnssec-list/) the key rollovers of all domains signed with DNSSEC can be displayed.

The last key rollover of a domain can be inquired with DNSSEC Info. With DNSSEC List the key rollovers of all domains signed with DNSSEC can be inquired.

## Description

Route: PUT ​/domain/{name}/\_autoDnssecKeyRollover  
There is no need to send a body with it.

```
{
}
```

```
{
    "stid": "20210423-app-14965",
    "status": {
        "code": "N0120002",
        "text": "The DNSSEC key rollover was startet successfully.",
        "type": "NOTIFY"
    },
    "object": {
        "type": "AutoDnssec",
        "value": "example.com"
    },
    "data": [
        {
            "created": "2021-04-23T12:22:19.605+0200",
            "updated": "2021-04-23T12:22:19.605+0200",
            "owner": {
                "context": 4,
                "user": "customer"
            },
            "updater": {
                "context": 4,
                "user": "customer"
            },
            "status": "NOT_SET",
            "execution": "2021-04-23T12:22:19.000+0200",
            "id": 4307991758
        }
    ]
}
```

Task code: 0120002  
Uses [Auto\_DNSSEC](/en/api/core-autodnssec-object/) object

```
<request>
	<auth>
		<user>customer</user>
		<context>4</context>
		<password>password</password>
	</auth>
	<owner>
		<user>customer2</user>
		<context>4</context>
	</owner>
	<task>
		<code>0120002</code>
		<auto_dnssec>
			<name>example.com</name>
		</auto_dnssec>
	</task>
</request>
```

```
<response>
	<result>
		<data>
			<auto_dnssec_job>
				<job>
					<id>3603918</id>
					<status>NOT_SET</status>
				</job>
			</auto_dnssec_job>
		</data>
		<status>
			<code>N0120002</code>
			<text>The DNSSEC key rollover was startet successfully.</text>
			<type>notify</type>
			<object>
				<type>auto_dnssec</type>
				<value>example.com</value>
			</object>
		</status>
	</result>
	<stid>20150702-app-282</stid>
</response>
```