Enabling DNSSEC

Scenario:

You need to enable DNSSEC for one authoritative DNS zone you previously configured (please see the “Create an authoritative DNS zone” howto).

 

How to configure DNSSEC:

Log on to GSLB.me using your credentials

DNSSEC - Logon screen

From the main interface dashboard, click on the authoritative zone you want to enable DNSSEC for

 

DNSSEC - Zone selection

The zone configuration dashboard is then displayed. By default DNSSEC is disabled: click on the “Enabled” switch button to turn it on:

DNSSEC - Enabling for a zone

After switching on the DNSSEC setting, a warning is displayed to remind you that you will have to send the DS record to your registrar, in order to establish the DNSSEC chain of trust.

DNSSEC - Confirmation

After acknowledging the reminder, click on the “Save” button at the bottom of the page in order to save changes:

DNSSEC - Zone records

After saving changes, click on the “Show DS Record” button, to display the DS record that will have to be shared with your domain registrar:

DNSSEC - Getting DS Record

The DS record for your DNSSEC-enabled domain is displayed. This will have to be shared with your domain registrar in order to complete DNSSEC configuration. Based on your preferred digest type you will be able to select one of the displayed DS records:

DNSSEC - Displaying DS Record

DNSSEC is now enabled, and will be used for all static and dynamic records, and for all geohosts belonging to the authoritative zone.

Comments are Closed

^