How do I enable and configure DNSSEC on my domains?

All shared, cloud web hosting, semi-dedicated, and reseller hosting plans support DNSSEC.

Enabling DNSSEC in cPanel

1. Log in to cPanel and search for Zone Editor.

2. Click the DNSSEC button next to your domain.

3. Click Create Key.

4. A confirmation dialog will appear. For most users the default values are accepted by the registry. If you have special requirements, use the Customize interface. Otherwise, click Create.

5. You will be redirected to the DNSSEC Key Details page containing the Key Tag, Algorithm, Digest Type, and Digest values needed to configure DNSSEC with your domain registrar.

6. You can view these DNSSEC keys at any time through cPanel’s Zone Editor.

Configuring DNSSEC with your registrar

After generating the DNSSEC keys in cPanel, you need to add the DS (Delegation Signer) records at your domain registrar. Each registrar has a different interface for this — consult your registrar’s documentation for specific instructions.

You will need the following values from the DNSSEC Key Details page:

• Key Tag
• Algorithm
• Digest Type
• Digest