Enable DNSSEC for your domain quickly using this simple step-by-step process in DirectAdmin. After enabling it in DirectAdmin, you must also add the DS record at your domain registrar to complete DNSSEC for the domain.
Step 1: Log in to DirectAdmin
Sign in to your DirectAdmin control panel.
Step 2: Open DNS Management
In DirectAdmin, go to DirectAdmin -> DNS Management.
Step 3: Open DNSSEC
Click the DNSSEC button.
Step 4: Generate the Keys
Click the GENERATE KEYS button.
Step 5: Confirm the Action
When prompted, click CONFIRM.
Step 6: Sign the Zone
After the keys are generated, click SIGN YOUR ZONE. DirectAdmin’s DNSSEC process is to generate the keys first, then sign the zone.
Step 7: Copy the DS Record Information
After the zone is signed, copy the DS record information shown for the domain. This is the information that must be added at your registrar.
Step 8: Log in to Your Domain Registrar
Sign in to the account where your domain name is registered.
Step 9: Open the DNSSEC or DS Record Section
Find the DNSSEC, DS Record, or similar section for the domain.
Step 10: Add the DS Record
Paste the DS record from DirectAdmin into your registrar.
Some registrars accept the full DS record on one line, while others ask for these values separately:
Key Tag
Algorithm
Digest Type
Digest
Step 11: Save the Changes
Save the DNSSEC or DS record changes at your registrar.
Step 12: Allow Time for Propagation
Allow some time for the DNSSEC changes to propagate.

