Managing DNSSEC (Domain Name System Security Extensions) for domains using registrar-provided nameserverslike BasicDNS (free) or PremiumDNS (paid)is the easiest way to secure your domain.
Because you are using our nameservers, Nixzoehost handles the complex task of "signing" your DNS zone and managing the cryptographic keys on your behalf.
How it Works: The "Set and Forget" Method
When you use our default nameservers, you don't need to worry about manual DS records or Public Keys. Our system automates the Chain of Trust for you.
The Setup Process
-
Automation: Once you toggle DNSSEC to ON, our servers automatically generate a private key to sign your DNS records and a public key to share with the registry.
-
DS Record Submission: Nixzoehost automatically sends the required DS (Delegation Signer) record to the TLD registry (like Verisign for
.com). -
Synchronization: If you add or change an IP address (A Record) in your dashboard, our system instantly re-signs that record with a new digital signature.
Why choose PremiumDNS for DNSSEC? While both support DNSSEC, PremiumDNS uses a global "Anycast" network. This means your signed security records are mirrored on servers all over the world, ensuring that the extra security check doesn't slow down your website's loading speed for international visitors.
How to Enable DNSSEC for Basic or PremiumDNS
-
Log in to your Nixzoehost Client Area.
-
Go to Domains > My Domains and click Manage next to the domain you want to secure.
-
Click the Advanced DNS tab.
-
Find the DNSSEC section.
-
Click the Status toggle to switch it to ON.
-
Wait for 60 minutes: It takes a small amount of time for the registry to accept the new security keys and update the global "Chain of Trust."
What to Keep in Mind
-
No Manual Edits: When using Basic or PremiumDNS, you cannot manually edit the DS record values. This is a safety featuremanual errors in DNSSEC can take your entire website offline.
-
Switching Nameservers: IMPORTANT. If you decide to move your domain away from Nixzoehost nameservers (e.g., pointing to Cloudflare), you must turn DNSSEC OFF first. If you move nameservers while DNSSEC is still active, your domain will fail security checks and stop resolving.
-
Transferring In: If you transfer a domain to Nixzoehost that already has DNSSEC enabled, the transfer might stall. It is always best to disable DNSSEC at your old registrar before starting a transfer.
