Enabling DNSSEC in Your Premium DNS Account
If you meet the following criteria, you can enable Domain Name System Security Extensions (DNSSEC), and we will manage them for you:
- Have a DNSSEC-compatible domain name:
- .com
- .net
- .biz
- .us
- .org
- .eu
- .se
- .at
- .co.uk, .me.uk, and .org.uk
- .co, .com.co, .net.co, and .nom.co
- Use our nameservers
- Have a Premium DNS account
Because we manage your DS records, no further action is required after you complete the steps in this article.
If you do not meet all of these criteria, see What is DNSSEC? for information about using self-managed DNSSEC.
NOTE: You cannot use both DNSSEC and Secondary DNS with the same domain name.
To Enable DNSSEC in Your Premium DNS Account
- Log in to your Account Manager.
- Click Premium DNS.
- Next to Premium DNS, click Launch.
- For the domain name you want to use, click Advanced Settings.
- Go to the DNSSEC tab.
- For Enabled, select On.
- In the Email key change notifications field, enter your email address.
- Click Save.
NOTE: If you receive the following error message, your attempt to enable DNSSEC failed: Save failed. Zone contains invalid CNAME record and cannot be DNSSEC enabled.
To resolve the issue, go to the Zone File Editor for the domain name you want to enable DNSSEC for, locate the CNAME record that conflicts with another record in your zone file, and then edit or delete one of the conflicting records. For instance, you might have a CNAME record and an A record that both have the same www hostname.
For more information about editing or deleting zone file records, see Managing DNS for Your Domain Names.
