Skip to content

How To Use the Gandi DNS Plugin

This plugin works against the Gandi DNS provider. It is assumed that you have already setup an account and have a registered domain with an associated DNS zone you will be working against.


First, login to your account page and go to the Security section. There will be an option to generate or regenerate the "API Key for LiveDNS". Do that and make a record the new value.

Using the Plugin

The API key is used with the GandiToken SecureString parameter.


The GandiTokenInsecure parameter is deprecated and will be removed in the next major module version. If you are using it, please migrate to the Secure parameter set.

$pArgs = @{
    GandiToken = (Read-Host "Gandi Token" -AsSecureString)
New-PACertificate -Plugin Gandi -PluginArgs $pArgs