diff --git a/dnsapi2.md b/dnsapi2.md
index 518ea29..88975a1 100644
--- a/dnsapi2.md
+++ b/dnsapi2.md
@@ -702,6 +702,10 @@ you can add this trusted root CA with
 ```
 
 This script will create a new access token with a default lifetime of 30 minutes. Note that these tokens are by default IP-whitelisted and will not work if your IP is not whitelisted in the Transip control panel.
+If you cannot work with IP whiltelisting, then make sure you create a key with `Only allow whitelisted IP's` unchecked and set the environment variable as follows:
+```sh
+export TRANSIP_Token_Global_Key="true"
+```
 
 To issue a cert:
 ```sh