Selling DNSSEC as a Complementary Service to Domain Registration

DNSSEC is a set of security extensions to DNS that provides the means for authenticating DNS records. DNSSEC adds protection for DNS records, and allows the resolvers and applications to authenticate the data received. The point of DNSSEC is to provide a way for DNS records to be trusted by whoever receives them. The key innovation of DNSSEC is the use of public key cryptography to ensure that DNS records are authentic.

The DNSSEC service is sold in Billing as a separate resource that can be added to a service plan. The resource is present in the system by default and does not require further configuration. When a customer purchases the DNSSEC service, Billing provisions the resource to the customer domain subscription and enables the service at registrar system.

Note: DNSSEC is officially supported by the InterNetX, OpenSRS, and Openprovider domain plugins (PHP) only. You can also design your own domain plugin which supports DNSSEC.

Selling the service to existing customers

To sell DNSSEC as a complementary service to domain registration to existing customers perform the following:

1. Add the DNSSEC resource (ID=2005) to a service template domain registration service plan is based on.
2. Configure the resource rate for the DNSSEC resource in the service plan as following: Included Units=0, Max Units=1, Min Units=0. This will make DNSSEC a complementary service sold in the framework of the domain service plan. Specify fees. For details on resource rates configuration see Adding Service Plan Resource Rates.
3. Synchronize the service plan with its subscriptions. For details see Synchronizing Subscriptions. The DNSSEC resource will appear in customer subscriptions in the Optional status. Customer can now place an upgrade order to purchase the service.

Selling the service to new customers

To sell DNSSEC as a complementary service to domain registration to new customers perform the following:

1. Make sure, that system prior configuration for selling domain registration is completed. For details see Managing Domain Processing.
2. Include the DNSSEC resource into some resource category to make it visible in the purchasing wizards. For details see Including Resource in Resource Category.
3. Create a domain service template for the selected zone. During service template creation, add the DNSSEC resource to the service template. For details see Preparing Domain Service Template.
4. Create a service plan based on the domain service template created on the 3d step. For details see Managing Service Plans.
5. Configure the resource rate for DNSSEC resource in the service plan as following: Included Units=0, Max Units=1, Min Units=0. This will make DNSSEC a complementary service sold within the framework of the domain service plan (the same as if DNSSEC was offered as an up-sale to domain registration). Specify fees. For details on resource rates configuration, see Adding Service Plan Resource Rates.

Removing the service from customers' subscription

To remove the DNSSEC service from customers' subscriptions forcibly perform the following:

1. Remove the DNSSEC resource rate from the service plan.
2. Synchronize the service plan and its subscriptions.