Domains Help

Enable DNSSEC in my Premium DNS account


Domain Name Security Extensions (DNSSEC) adds an extra layer of security to your domain names by attaching digital signature (DS) records to their DNS information. Your domain must meet the following criteria before enabling DNSSEC. If you don't meet these criteria, see our DNSSEC FAQ article for information about using self-managed DNSSEC.

Looks like you're not logged in. If you log in above (under Text Icon), we can save you a couple of steps.

  1. Go to the DNS Management page.
  2. Under Advanced Features, click DNSSEC.
  3. Under Enabled, click On.
  4. In the Email key change notifications field, enter your email address, and click Apply.
  5. Note: If you receive the following error message, your attempt to enable DNSSEC failed: Save failed. Zone contains invalid CNAME record and cannot be DNSSEC enabled. To resolve the issue, go to the Records section (above the Advanced Features section), locate the CNAME record that conflicts with another record in your file, and edit or delete one of the conflicting records. For instance, you might have a CNAME record and an A record that have the same www hostname.

Because we manage your DS records, no further action is required after you complete the steps in this article.

Note:You cannot use both DNSSEC and Secondary DNS with the same domain name.

Next step

More info


Was This Article Helpful?
Thanks for your feedback. To speak with a customer service representative, please use the support phone number or chat option above.
Glad we helped! Anything more we can do for you?
Sorry about that. Tell us what was confusing or why the solution didn’t solve your problem.