General
An update token is a special password that only allows the update of the host for which it was generated. Login to the website is not possible with this token.
NOTE:
When using the token, the login to be used in the update client changes as follows:
Hostname = Hostname
Username = Hostname
Password = Update-Token
The use of an individual update token makes it possible to manage the hosts with a central account, while on the DynDNS clients (which are operated in a potentially insecure network) only the access data for one host are available. With these access data, only an update of the IP is possible, while the login on the website is not allowed.
So if the password for this host is compromised, the administrator of the host can invalidate this one password without having to adjust all other DynDNS clients that are operated with the same account.
Activation of the update token for a host
To be able to activate the update token, one has to log in via the website with the normal access data and then click on the host name for which a token is to be created.
An explanation of the symbols in front of the host name can be found here.
In the Token column, the Update Token must be selected from the drop-down menu. Then a button with the inscription + Create Token appears.
The host-specific password is now displayed exactly once and then saved as a hash. If the token is lost, recovery is not possible; instead, a new token must be generated. The token consists of 12 lower case Latin letters (a-z) separated by a hyphen in groups of 4.
In the DynDNS client, the access data are now stored as follows (all other settings can be found in the SPDNS FAQ):
Hostname = Hostname
Username = Hostname
Password = Update-Token
Using the example of a Securepoint UTM v12.2, the settings would look like this when using a token:
| Enabled: | Yes | Enables or disables (default) the DynDNS function |
| Hostname: | hostname.spdns.de | Desired Hostname |
| User: | hostname.spdns.de | The corresponding user name must be entered here. |
| Password: | The password must be entered here. | |
| Server: | update.spdyn.de | The securepoint update server |
| MX: | ||
| Webresolver: | On | Must be activated if the NAT router is located before the DNS (i.e.: UTM → Fritzbox/Speedport → internet) |
| Protocol: | The DNS service can be activated for IPv4 or IPv6 addresses only, or both IPv4 and IPv6. | |
If the update was successful, this is also displayed after a reload of the website: