Enable DNSSEC in my Premium DNS account

Domain Name Security Extensions (DNSSEC) adds an extra layer of security to your domain names by attaching digital signature (DS) records to their DNS information. Your domain must meet the following criteria before enabling DNSSEC. If you don't meet these criteria, see our DNSSEC FAQ article for information about using self-managed DNSSEC.

1. Log in to your My Products page.
2. If you aren't automatically directed there, make sure to select the My Products tab.
3. Next to the domain you want to use, click DNS.
4. Under Advanced Features, click DNSSEC.
5. Under Enabled, click On.
6. In the Email key change notifications field, enter your email address, and click Apply.

Note: If you receive the following error message, your attempt to enable DNSSEC failed: Save failed. Zone contains invalid CNAME record and cannot be DNSSEC enabled. To resolve the issue, go to the Records section (above the Advanced Features section), locate the CNAME record that conflicts with another record in your file, and edit or delete one of the conflicting records. For instance, you might have a CNAME record and an A record that have the same www hostname.

Because we manage your DS records, no further action is required after you complete the steps in this article.

Note:You cannot use both DNSSEC and Secondary DNS with the same domain name.

Next step

• Manage DNSSEC for my domain

More info

• Manage DNS zone files