DNSSEC with External Name Servers

In addition to the provision of the DNSSEC service, the use of DNSSEC also requires the domain registrar (such as IONOS) to assign a DS Resource Record (also known as DS Record).

If you use a domain registered through IONOS with external name servers and want to use the DNSSEC service of your DNS provider, please contact our customer service so that we can set up the DS record for you.

Step 1 - Gather information required for the DS record

In order for us to set up the DS record for you, we need your domain name and the information listed below in the following format:

"extensions": {
"secDns": {
"dsData": [{
"keyTag":
"alg":
"digestType":
"digest":
"keyData": {
"flags":
"protocol":
"alg":
"pubKey":
}
}]
}
}
}

This example lists the required information for the domain example.com:

"extensions": {
"secDns": {
"dsData": [{
"keyTag": 370,
"alg": 13,
"digestType": 2,
"digest": "BE74359954660069D5C63D200C39F5603827D7DD02B5 6F120EE9F3A86764247C",
"keyData": {
"flags": 257
"protocol": 3
"alg": 7
"pubKey":"/AwEAAbinasY+k/9xD4MBBa3QvhjuOHIpe319SFbWYIRj /nbmVZfJnSw7By1cV3Tm7ZlLqNbcB86nVFMSQ3JjOFMr" }
}]
}
}

You can usually find this information in the management interface of your DNS provider. If you do not have access to this information, please contact your DNS provider.

Step 2 - Contact IONOS Customer Service

To set up the DS record, please send us a request by e-mail to: support@ionos.co.uk

To help us process your request quickly, please use "Manual DS record required for external DNS provider" as the subject line.