Domain Name Security Extensions (DNSSEC) add an extra layer of security to your domain names by attaching digital signature (DS) records to their DNS information. Your domain must meet the following criteria before enabling DNSSEC. If you don't meet these criteria, see DNSSEC FAQ for information about using self-managed DNSSEC.
How you enable DNSSEC will depend on the view of your account:
In Card View, your account will look something like this:
If you receive the following error message, your attempt to enable DNSSEC failed: Save failed. Zone contains invalid CNAME record and cannot be DNSSEC enabled. To resolve the issue, go to the Records section (above the Advanced Features section), locate the CNAME record that conflicts with another record in your file, and edit or delete one of the conflicting records. For instance, you might have a CNAME record and an A record that have the same www hostname.
In List View, your account will look something like this:
If you receive the following error message, your attempt to enable DNSSEC failed: Save failed. Zone contains invalid CNAME record and cannot be DNSSEC enabled. To resolve the issue, go to the Records section (above the Advanced Features section), locate the CNAME record that conflicts with another record in your file, and edit or delete one of the conflicting records. For instance, you might have a CNAME record and an A record that have the same www hostname.
Because we manage your DS records, no further action is required after you complete the steps in this article.
You cannot use both DNSSEC and Secondary DNS with the same domain name.
For more information about editing or deleting DNS records, see Manage DNS .