How to Enable DNSSEC Protection for Your Domain Name

DNSSEC (Domain Name System Security Extensions) adds digital signatures to your domain name’s DNS data. These signatures make it possible to verify that DNS responses are authentic and have not been modified. This reduces the risk of visitors being unknowingly redirected to the wrong server. In this guide, we explain how to configure DNSSEC through the ConsulHosting client area.

Note An incorrect DNSSEC configuration can make your domain name unreachable. If you use an external DNS provider, only use the DNSSEC details provided by that provider.

Enabling DNSSEC at ConsulHosting

Do you manage your domain name’s DNS at ConsulHosting? If so, you can enable DNSSEC automatically.

1. Log in to the client area.
2. Open the Domains page.
3. Click the domain name for which you want to enable DNSSEC.
4. Scroll down to the Management section.
5. Click DNSSEC.
6. Click Enable DNSSEC.
7. Wait until DNSSEC has been enabled. This may take up to 30 seconds.

Configuring DNSSEC with an External DNS Provider

Do you use the nameservers of an external DNS provider, such as Cloudflare? First enable DNSSEC with that provider and retrieve the required DNSSEC details.

1. Copy the values for Flags, Protocol, Algorithm, and Public Key from your DNS provider.
2. Log in to the client area.
3. Open the Domains page.
4. Click the domain name for which you want to configure DNSSEC.
5. Scroll down to the Management section.
6. Click DNSSEC.
7. Under Flags, Protocol, and Algorithm, select the values provided by your DNS provider.
8. Enter the public key from your DNS provider in the Public Key field.
9. Click Add Record.
10. Wait until the DNSSEC record appears. This may take up to 30 seconds.

Tip After configuring DNSSEC, use Internet.nl to check whether the DNSSEC configuration works correctly. Keep in mind that it may take some time for the change to take effect.