How do I set up DNSSEC for my domains?

Domain names registered with Versio and linked to hosting via DNS management are automatically secured with DNSSEC. However, if you use name servers, you can still enable DNSSEC via our control panel, naturally only if your name servers also support this. In this guide, we'll explain how to enable DNSSEC.

How does it work?

Step 1: Log in to the Versio customer panel.

Step 2: Click on domain names> overview> and click on the arrow behind the domain. There you will see the option DNSSEC keys. If you click on Manage DNSSEC keys, you can add the DNS keys for the domain.

Where can I find these keys on the hosting (DirectAdmin)?

Step 1: Login DirectAdmin.

Step 2: Click on your domain name.

Step 3: Under the heading DNS Management at the bottom of the page you will see DNSSEC - DNS Security, you will see the option Generate Keys on the right.

If you do not see the option DNS Management, first follow this article.

When you click on the option Generate Keys, you will see the message Zone keys generated. If you click on back underneath, you will return to the DNS management page. When you look at the bottom of the page again, you will see the DNSSEC Records which you should use.

Step 4: In the new DirectAdmin skin, the DNSSEC zone needs to be signed first. You can do this with the option Sign your zone.

How should I set this up in my customer panel?

Next to the key-signing Key, you will see the KEY ID. You need to enter this number in the customer panel under the KEY tag. With Algorithm RSA-SHA256 (8) and the flag you set to KSK (257). At Public key, you enter the value after DNSKEY 257 3 8. Please note: when you enter these codes via cut/paste, you remove the spaces from the DNS KEY before you save them.