To enable DNSSEC functionality for a domain registered elsewhere:
- Go to Services > Domains.
- Click the name of the domain for which you want to enable DNSSEC.
Important: DNSSEC is provided for domains with internal DNS hosting only.
- In the DNS tab, go to the DNSSEC subtab.
- Click Enable DNSSEC. After successfully enabling DNSSEC, a DS (Delegation Signer) record is displayed with the following information:
- Key Tag is a short numeric value which can help identify the referenced DNSKEY record.
- Algorithm is the algorithm of the referenced DNSKEY record.
- Digest Type is the cryptographic hash algorithm used to create the “Digest” value.
- Digest is a cryptographic hash value of the referenced DNSKEY record.
- Manually specify on the registrar side:
- platform name servers for the domain
- the DS record of the domain
You can enable and disable the ability of customers and resellers to manage DNSSEC for domains registered elsewhere. To do this:
- Go to System > Settings > System Properties.
- Enable or disable the “Provide DNSSEC for domains registered elsewhere” system property.
Important: After the “Provide DNSSEC for domains registered elsewhere” property is disabled, both customers and resellers will no longer enable DNSSEC for domains registered elsewhere. If there were domains with enabled DNSSEC by the moment the property is disabled, those domains will only have the option to switch DNSSEC off, after which all DNSSEC related options will be hidden.