ipa-client-install --unattended --principal=admin --password=SomeADMINpassword --domain=cos10.local

ipa-client-encrypted-dns-4.12.2-17.el10.x86_64
ipa-client-4.12.2-17.el10.x86_64

diff --git a/ipaclient/install/client.py b/ipaclient/install/client.py
index 372daa51e..aa835b7fc 100644
--- a/ipaclient/install/client.py
+++ b/ipaclient/install/client.py
@@ -48,6 +48,7 @@ from ipalib.util import (
     no_matching_interface_for_ip_address_warning,
     validate_hostname,
     verify_host_resolvable,
+    get_reverse_record_default,
 )
 from ipaplatform import services
 from ipaplatform.constants import constants
@@ -1500,6 +1501,18 @@ show
 send
 """

+DELETE_TEMPLATE_REVERSE_PTR = """
+update delete $ZONE PTR
+show
+send
+"""
+
+ADD_TEMPLATE_REVERSE_PTR = """
+update add $ZONE $TTL PTR $HOSTNAME.
+show
+send
+"""
+
 UPDATE_FILE = paths.IPA_DNS_UPDATE_TXT
 CCACHE_FILE = paths.IPA_DNS_CCACHE

@@ -1554,6 +1567,14 @@ def update_dns(server, hostname, options):
             template = ADD_TEMPLATE_AAAA
         update_txt += ipautil.template_str(template, sub_dict)

+    for ip in update_ips:
+        zone = get_reverse_record_default(ip)
+        sub_dict = dict(ZONE=zone, HOSTNAME=hostname, TTL=1200)
+        update_txt += ipautil.template_str(DELETE_TEMPLATE_REVERSE_PTR,
+                                           dict(ZONE=zone))
+        update_txt += ipautil.template_str(ADD_TEMPLATE_REVERSE_PTR,
+                                           sub_dict)
+
     if not do_nsupdate(update_txt, options, server):
         logger.error("Failed to update DNS records.")
     verify_dns_update(hostname, update_ips)
diff --git a/ipalib/util.py b/ipalib/util.py
index 128420181..442edac7f 100644
--- a/ipalib/util.py
+++ b/ipalib/util.py
@@ -732,6 +732,12 @@ def get_reverse_zone_default(ip_address):
     return normalize_zone('.'.join(items))


+def get_reverse_record_default(ip_address):
+    ip = netaddr.IPAddress(str(ip_address))
+
+    return normalize_zone(ip.reverse_dns)
+
+
 def validate_rdn_param(ugettext, value):
     try:
         RDN(value)