Implementing DNSSEC on DomainIndia.com Print

Step 1: Activate DNSSEC service on DomainIndia.com

To activate the DNSSEC service on your domain registered with DomainIndia.com, you need to raise a support ticket or use LiveChat on DomainIndia.com. Ask for the DNSSEC service activation. Once the service is activated, you can log in to your DomainIndia.com account.

Step 2: Add Delegation Signer (DS) Records

A Delegation Signer (DS) Record contains the digital signature information for your domain name's DNS and identifies the DNSSEC signing key of a delegated zone. You can manage the DS Record(s) for your domain name from the Order Details view within your Control Panel.

Here are the steps to add a DS record:

1. Log in to your Control Panel: Access your control panel on DomainIndia.com.

2. Search for the domain name: Use the search function to find the domain name you want to manage.

3. Open the Order Information view: From the search results, open the Order Information view for your domain.

4. Click the DNSSEC link: This will open the Manage DNSSEC view.

5. Click the ADD RECORDS button: If any DS Records are already added, they will be listed here. Click on the ADD RECORDS button to proceed.

6. Provide the required information: Fill in the following fields:

   • Key Tag: Contains the tag value of the DNSKEY Resource Record that validates this signature. Enter an integer value in the range 0 to 65536.

   • Algorithm: Specify the cryptographic algorithm that is used to generate the signature.

   • Digest Type: Choose the algorithm type used to construct the Digest. Applicable values are 1, 2 & 3 for .COM / .NET and 1 & 2 for other domain name extensions.

   • Digest: This is an alpha-numeric string generated by applying the Digest Type algorithm to a message. It needs to be a 40-character string for Digest Type value 1 and a 64-character string for Digest Type values 2 and 3.

7. Click the Save button: Save the new DS record.

Step 3: Delete a DS Record

If you need to delete a DS record, follow these steps:

1. Log in to your Control Panel.

2. Search for the domain name and open the Order Information view.

3. Click the DNSSEC link.

4. Click the Delete link: In the list of DS Records, find the one you wish to delete and click the Delete link under the Action column.

5. Confirm the deletion: Click the OK button to confirm and delete the DS record.

Remember, changes may take some time to propagate, so allow up to 48 hours to see the effect of your changes.

Implementing DNSSEC for Hosting on DomainIndia.com cPanel/DirectAdmin Hosting

After setting up DNSSEC for your domain registered with DomainIndia.com, the next step involves implementing DNSSEC on your hosting platform. If you are using cPanel/DirectAdmin on DomainIndia's hosting platform, you can follow these steps:

1. Log in to your cPanel/DirectAdmin account.
2. Navigate to the 'Domains' section.
3. Find and click on the 'DNS Zone Editor'.
4. In the DNS Zone Editor, look for your domain name and click on 'Manage'.
5. On the page that opens, click on the 'DS Records' section.
6. Click on 'Add Record' and enter the DS Record details (Key Tag, Algorithm, Digest Type, Digest) that you saved from your DomainIndia.com account.
7. Click on 'Save'.

The changes will take some time to propagate across the DNS network. Once propagated, your domain will be protected with DNSSEC.

Implementing DNSSEC for Third-Party Hosting

If your domain is registered with DomainIndia.com but hosted on a third-party service, you will still need to set up DNSSEC at both ends. After setting up the DS record on DomainIndia.com, you need to configure DNSSEC on your hosting platform. The steps may differ depending on the hosting provider and the control panel they use. However, generally, the process is similar:

1. Log in to your hosting control panel.
2. Find the section related to domains or DNS management.
3. Look for DNSSEC or DS Record management.
4. Add the DS Record details (Key Tag, Algorithm, Digest Type, Digest) obtained from your DomainIndia.com account.
5. Save the changes.

If you are unable to find the DNSSEC settings or have trouble adding the DS Records, contact your hosting provider's support. They can guide you through the process or even add the records on your behalf.

It's important to note that DNSSEC provides a significant increase in security for your domain, preventing DNS spoofing and other forms of DNS hijacking. It's a valuable tool for any website that prioritizes security and integrity of its data.