dns-update 3.10/3.13 rb433

running dns-update command from the terminal on my rb433 3.10 system results in “bad key”. On the server it says TSIG failure. I run the exact same command on another 3.10 rb500r5 and it goes through. I use the same ntp server and time zone for all mikrotiks and dns servers and the times are verified to be exactly the same to the second. The one that doesn’t work is a hotspot and the one that works is just a backhaul client. I would hate to have to run this remotely everytime my ip changes. Any ideas on where to look next to trouble shoot?