enabling DNSSEC

Question

Dear All,

i'm having difficulties understanding how to sign the dnszone on AzureDNS with DNSSEC.

I understand that we need to add a DS record to the zone, but it is not clear how after reading the help file.

The zone is hosted at Azure, the domain registrar is Argeweb in the netherlands, the don't support external nameservers with DNSSEC

Is it possible to use DNSSEC with a DS record with an external registrar or do we need to change something else?

regards,

Dawi

Answer 1

Hello Dawi de Bruin

I understand that you are trying to be enabling the DNSSEC

Copy the delegation information and use it to create a DS record in the parent zone.

If the parent zone is a top-level domain (for example: .com), you must add the DS record at your registrar. Each registrar has its own process. The registrar might ask for values such as the Key Tag, Algorithm, Digest Type, and Key Digest

Kindly check the public document for more understanding how to add:
Azure Public DNS zone with DNSSEC

DNSSEC overview

In case your DNS provider doesn't support the delegation please check the below suggestions:

• Normally, you would add the DS record to the parent zone at your registrar. Since Argeweb does not support external nameservers with DNSSEC, you might need to contact Argeweb's support team to see if they can manually add the DS record for you.
• If Argeweb cannot meet your DNSSEC requirements, you might need to transfer your domain to a registrar that supports DNSSEC with external nameservers.

---

Hope the above answer helps! Please let us know do you have any further queries.

Please do consider to “up-vote” wherever the information provided helps you, this can be beneficial to other community members.