FRED v2026.1 Documentation¶

3.2. Preparing registrars¶

There are two types of registrars:

a common registrar is an organization which provides domain administration to end users and pays for access to the Registry, and
the system registrar which is used by the Registry to manage domains manually and to perform automated administration procedures. This registrar has full permissions (he can change any object regardless of object’s designated registrar or its blocking of changes).

Both types of registrars are prepared in the same way:

create a registrar,
assign them authentication data,
permit them to operate in a zone (or zones).

Important

For the system to work properly, exactly one system registrar must be present.

Tip

If you want to work only with the EPP communication, the system registrar will do. However, if it is the billing and invoicing subsystem you want to work with, we recommend adding a (testing) common registrar, too.

3.2.1. Creating a registrar¶

# adding a common registrar:
fred-admin --registrar_add \
   --handle=REG-FRED-A --reg_name="Testing registrar A" \
   --organization="Company l.t.d." --country=CZ

# adding a system registrar:
fred-admin --registrar_add \
   --handle=REG-SYSTEM --reg_name="System registrar" \
   --country=CZ --system

This command creates a new registrar with some data.

--handle (*) – handle of the registrar to be added
--reg_name – registrar’s name – you may set it the same as --organization
--organization – registrar’s organization or company
--country (*) – registrar’s country by 2-letter country code (table enum_country)
--no_vat – flag this registrar as NOT a VAT-payer
--system – designates this registrar to be the “system registrar”
many other parameters are available, see the program help fred-admin --registrar_add --help.

Note

Registrar information can be edited later via the WebAdmin.

3.2.2. Setting authentication data¶

Authentication data allows registrars to connect to the Registry securely.

fred-admin --registrar_acl_add \
   --handle=REG-FRED-A \
   --certificate="39:D1:0C:CA:05:3A:CC:C0:0B:EC:6F:3F:81:0D:C7:9E" \
   --password=passwd

This command assigns the given access control data to a registrar.

--handle (*) – registrar’s handle
--password (*) – registrar’s password – both the password and certificate are needed to access the Registry
--certificate (*) – fingerprint of the registrar’s certificate

It can be created from an existing certificate with the following command:
```
openssl x509 -noout -fingerprint -md5 -in /path/to/cert.pem | cut -d= -f2
```

Note

For testing purposes, you can use the test certificate that comes with the fred-mod-eppd package and was installed in $PREFIX/share/fred-mod-eppd/ssl/.

Tip

If that is the case, you can copy & paste the fingerprint from this example.

3.2.3. Granting access to a zone¶

fred-admin --registrar_add_zone \
   --zone_fqdn=cz --handle=REG-FRED-A \
   --from_date="2007-01-01"

This command grants a registrar permissions to manage objects in a specified zone.

--handle (*) – registrar’s handle
--zone_fqdn (*) – name of a zone the registrar gains access to
--from_date – date since when the access is allowed – default: today