How to activate DNSSEC for your domain
How does DNSSEC work?
DNSSEC increases the security of DNS in domains. Its activation prevents a high percentage of malicious activities.
DNSSEC adds a digital signature to the domain and DNS server. In this way, when a browser makes a request to your website, it receives digital signatures from DNS servers and your domain, and if they match the digital signatures of the central domain provider, your web browser will display the content.
If anyone stands in the midst of this communication to manipulate it and you do not have DNSSEC enabled, the website would not be accessible. But with DNSSEC enabled you make sure that the website you are viewing is the right one.
There are a number of advantages that DNSSEC can offer, both to you and your visitors or customers. DNSSEC helps protect your brand and your customers' access to your page, increase customer confidence, can help retain user who prioritize security and increase the security of your page with increased internet confidence.
cdmon implements DNSSEC on its DNS servers and domains for the extensions .com, .net, .cc, .name, .tv, .es, .com.es, and .g. DNSSEC will gradually be added in more extensions.
If you have domains or accommodation with any of the extensions mentioned above and cdmon DNS servers assigned, you can activate DNSSEC from different sections of your dashboard cdmon. Here's how to activate them from each section.
List of domains:
1.-Access your dashboard of cdmon and in the "Basic list of services" click on the top menu option List of domain.
2.- On the "Registered Domain List" page you can enable and disable DNSSEC on each of the domains compatible with DNSSEC.
3.- When activating you will appear a pop-up indicating that the status of DNSSEC has been changed.
Domain management:
1.- Access your control panel of cdmon and "Basic list of services" click on the option Domain.
2.- On the domain management screen you will see the option to turn the "DNSSEC" on and off.
3.- When activating you will appear a pop-up indicating that the status of DNSSEC has been changed.
Static DNS:
1.-In the "Basic list of services" click on the top menu option DNS.
2.- Click on the option Static DNS.
3.- Access the DNS zone you want to activate DNSSEC.
4.- Press the button Activate DNSSEC.
5.-When activating you will show you a pop-up telling you that the status of DNSSEC has been changed.
Once you have activated DNSSEC you must bear in mind:
That the activation of DNSSEC and its spread is not instantaneous and may take a few minutes.
In the case of .ES domains it may have a spread time of 2 hours for both activation and deactivation. Time that in the event of disabling DNSSEC the website may be inactive. That is why it is recommended to take this action in hours that has no impact.
After performing these steps you will have DNSSEC enabled and to verify that it is working you can access the tool DNSSEC Analyzer
Enter your domain and tap Enter. You can verify that DNSSEC has been activated correctly and is working.
Otherwise, that is, whether DNSSEC was not activated or not working properly, you would observe the following result.
Can I activate DNSSEC if I do not have cdmon DNS?
If you do not have assigned the DNS ofcdmon, if you want to activate DNSSEC, the system will tell you that you do not have cdmon DNS and that you can add the DNSSEC keys from your current DNS provider manually. You will therefore need to contact your current DNS provider to tell you the DNSSEC keys.
Access your dashboard of cdmon and in the "Basic list of services" click on the domain to which you want to add the keys. On the domain management screen click on the option DNSSEC you will see that you have a message as you do not have the DNS of cdmon and you must add the keys to your DNSSEC manually.
Click on Manage DNSSEC keys To access the DNSSEC key management screen, where you can manage your provider's keys. Click on the option Add DNSSEC key to access the form below and add the *key provided by your DNS provider.
*You must bear in mind that the key type may vary depending on the type of domain extension.
For more information, you can contact us.
Related Articles
Overview of the registered domain management panel
Register my domain From the registered domain management panel you can see generic domain information, modify domain data and manage DNS. To access the management panel of any of the domains you have registered incdmon, from the "Basic list of ...How to activate the cdmon Domain API
The Domain API is a tool that allows many of the operations available within, the control panel and the commercial web, by simply request to an API that we provide. In this guide we show the steps to take to activate the domain API on your cdmon user ...Activate Microplan Web Hosting
The microplan is a free hosting that can be activated with each domain you hire. Works like any other hosting plan with its own characteristics. Here are the steps to activate free Microplan hosting: Access the management of domain from the Basic ...Domain management: enable/deactivate expiration warnings
When you register a domain in cdmon by default, expiration notices are active. If you do not want to renew your domain and therefore you don't mind being released, you probably don't want to have expiration warnings to be sent to you for that domain. ...What to do with a domain
Register your domain now! You have just taken the first step and now you have your own domain name on the Internet. The next step would be to give your domain some functionality by creating your own website or using email addresses under your domain ...