Setting Up and Managing DNSSEC

In this article, we will show you how to enable and disable DNSSEC for your domains.

Requirements

You registered your domain at IONOS or added it to your IONOS account as an external domain.
You have the DNS Pro or Domain Guard feature added to your contract.
Your domain extension is DNSSEC compatible.
Your domain uses the default IONOS name servers.
Secondary DNS must be deactivated.

Edit DNS Settings

The function described in this article can be found in the DNS settings in your IONOS account.

Log In Now and Open DNS SettingsOpen DNS Settings Now

Activating DNSSEC

Open the DNS settings of the domain for which you want to enable DNSSEC.
In the DNSSEC section, click Activate.

DNSSEC is now activated. This may take a moment.

Please Note

It may take several hours before this change takes effect worldwide.

As part of the activation of DNSSEC, we have made the following changes to the DNS zone:

The zone was signed
The public signature key has been stored
A corresponding DS record (Delegation Signer Resource Record) was added.

Disabling DNSSEC

Open the DNS settings of the domain for which you want to disable DNSSEC.
In the DNSSEC section, click Disable.

DNSSEC is now deactivated. This will take at least 8 hours to update all systems.