How To Use the Dynu DNS Plugin

This plugin works against the Dynu DNS provider. It is assumed that you have already setup an account configured at least one DDNS domain to work against.

Warning

Dynu imposes some limitations on non-paid accounts. The most significant is a limit of 4 DNS records per domain which effectively means you can only create a cert with up to 4 names in it from the same domain (and only if you have no other DNS records counting against your limit). Additionally, if you are using one of Dynu's provided domain names, their official policy (as of 03/2019) is that you can't create TXT records until the domain is 30 days old. Though currently, that limitation only seems to apply to the web GUI.

Setup

You will need to retrieve the Client ID and Secret that will be used to update DNS records. You can find these on your Dynu Control Panel.

Using the Plugin

The Client ID is used with the DynuClientID string parameter and the secret is used with the DynuSecretSecure SecureString parameter.

Warning

The DynuSecret parameter is deprecated and will be removed in the next major module version. If you are using it, please migrate to the Secure parameter set.

$pArgs = @{
    DynuClientID = 'xxxxxxxx'
    DynuSecretSecure = (Read-Host 'Secret' -AsSecureString)
}
New-PACertificate example.com -Plugin Dynu -PluginArgs $pArgs

"Quota Exception" error

If you get this message it likely means you're on a free account and you've added too many names from the same domain to a certificate. See the note at the top of this guide for details.