• Home /
  • Setting Up DNSSEC

Setting Up DNSSEC

DNSSEC is a system by which you can create a security signature on the DNS queries to your zone. This enables the querying system to verify that the information received is the correct DNS information based on the security signatures.

Learn more about DNSSEC »

Update an existing DNSSEC »

 

To Configure DNSSEC on your Zone
1.  Click Overview or Manage DNS. Main menu bar
2.  Click Manage in the far right column.
3.  Click Zone Options on the menu bar. Zone Options Tab
4.  Click DNSSEC on the sub-menu bar. DNSSEC Tab in Zone Options
5.  Use the following information to complete the DNSSEC form:

Zone Signing Keys: Select Key Expiration and Key Size.
Defaults are: 1 month from now and 1,024 bits

Key Signing Keys: Select Key Expiration and Key Size.
Defaults are: 1 year from now and 2,048 bits

Notifications: Select a contact person to receive Email notifications.

NOTE: Make sure to select either When a key expires or Weeks before a key expires.

If one of these notifications is not selected, you will NOT be notified when your DNSSEC expires. This will impact your DNS resolution and may lead to increased QPS due to DNS information not being cached.

 DNSSEC form
6.  Click Add DNSSEC to complete the DNSSEC entry. Add DNSSEC

Next Step: Register DNSSEC For Your Domain »

« DNS Knowledge Base