Skip to content

How To Use the Hetzner DNS Plugin

This plugin works against the Hetzner DNS provider. It is assumed that you have already setup an account and created the DNS zone(s) you will be working against.


You will need to generate an API Token if you haven't already done so. Go to Manage API tokens after logging in to the DNS Console. Give the token a name and click Create access token. Make a note of the token value as you'll need it later and won't be able to retrieve it after this point.

Using the Plugin

You will need to provide the API Token as a SecureString value to HetznerToken.


The HetznerTokenInsecure parameter is deprecated and will be removed in the next major module version. If you are using it, please migrate to the Secure parameter set.

$pArgs = @{
    HetznerToken = (Read-Host 'Hetzner Token' -AsSecureString)
New-PACertificate -Plugin Hetzner -PluginArgs $pArgs