Close Window x

Frequently Asked Questions

Enabling DNSSEC in Your Premium DNS Account

Print this Article
Last Updated: May 11, 2015 2:13 PM

If you meet the following criteria, you can enable Domain Name System Security Extensions (DNSSEC), and we will manage them for you:

  • Have a DNSSEC-compatible domain name:
    • .com
    • .net
    • .biz
    • .us
    • .org
    • .eu
    • .se
    • .at
    • .co.uk, .me.uk, and .org.uk
    • .co, .com.co, .net.co, and .nom.co
  • Use our nameservers
  • Have a Premium DNS account

Because we manage your DS records, no further action is required after you complete the steps in this article.

If you do not meet all of these criteria, see DNSSEC FAQ for information about using self-managed DNSSEC.

NOTE: You cannot use both DNSSEC and Secondary DNS with the same domain name.

To Enable DNSSEC in Your Premium DNS Account

  1. Log in to your Account Manager.
  2. Click Premium DNS.
  3. Next to Premium DNS, click Manage.
  4. For the domain name you want to use, click Advanced Settings.
  5. Go to the DNSSEC tab.
  6. For Enabled, select On.
  7. In the Email key change notifications field, enter your email address.
  8. Click Save.

    NOTE: If you receive the following error message, your attempt to enable DNSSEC failed: Save failed. Zone contains invalid CNAME record and cannot be DNSSEC enabled.

    To resolve the issue, go to the Zone File Editor for the domain name you want to enable DNSSEC for, locate the CNAME record that conflicts with another record in your zone file, and then edit or delete one of the conflicting records. For instance, you might have a CNAME record and an A record that both have the same www hostname.

    For more information about editing or deleting zone file records, see Managing DNS for Your Domain Names.

To Enable DNSSEC for Domain Names Registered Elsewhere

In your Premium DNS account, you can enable Domain Name System Security Extensions (DNSSEC) for your DNSSEC-compatible domain names registered elsewhere. For more information about DNSSEC, see DNSSEC FAQ

You can also enable DNSSEC for certain domain names registered with us. For more information, see Managing DNSSEC for Your Domain Name and Enabling DNSSEC in Your Premium DNS Account .

  1. Log in to your Account Manager.
  2. Click Premium DNS.
  3. Next to Premium DNS, click Manage.
  4. Next to the domain name you want to enable DNSSEC for, click Advanced Settings.
  5. Go to the DNSSEC tab.
  6. For Enabled, select On.
  7. In the Email key change notifications field, enter the email address you want us to send key change notifications to.
  8. Click Save. Within a few minutes, we generate your DS records.
  9. Click View DS records. Your DS records display.
  10. Click Copy to Clipboard to copy the DS record information.
  11. To update your nameservers, submit the DS record information to your domain name's registrar.