Rotating a Domain’s DNSSEC keys on a Server

Are you looking for comprehensive information on how to rotate the DNSSEC (DNS Security Extensions) keys of a domain on a server? Then you are at the right place. It is possible to rotate the DNSSEC keys of your domain regularly to ensure enhanced security of your DNS record.

It is recommended that the DNSSEC keys of your domain be rotated yearly. In the version 84 and in the later versions of cPanel & WHM, the DNSSEC keys are included by the system in a backup file of the account. There is no need to create new DNSSEC keys if the account is transferred to another server. The information provided here with regard to the process for rotating the DNSSEC keys, applies to the version 84 and the later versions of cPanel & WHM.

In the version 82 and in the earlier versions of cPanel & WHM, when the account is transferred to another server, it becomes essential to create new DNSSEC keys for the account. Post that, the registrar needs to be updated with the new keys. Here, the DNSSEC keys are not included by the system in a backup file of an account.

Process to Rotate the Key for cPanel & WHM version 84 and later

The following steps need to be carried out to rotate the DNSSEC key:

• Navigate to the Zone Editor interface in cPanel.

cPanel >> Home >> Domains >> Zone Editor

• Generate a new DNSSEC key.

• Navigate to your domain registrar.

• Enter the domain’s new DNSSEC key information.

It needs to be mentioned here that many registrars provide an option known as, Manage DNSSEC, in their portals for domain management. If that option isn’t provided by them, then you need to manually add a DS record. This has to be added through their management portal.

• Wait 24 to 48 hours. This is needed for the DS record to propagate.

• The old DNSSEC key information for the domain needs to be removed from the registrar.

• Navigate to the Zone Editor interface in cPanel.

cPanel >> Home >> Domains >> Zone Editor

• Delete the old DNSSEC key.

With this, the process that is meant to rotate the DNSSEC keys of a domain on a server, comes to its successful conclusion. In the context of servers, Virtual Private Servers (VPS) have gained immense popularity due to the benefits that these have to offer. The VPS of HTS Hosting are powerfully configured to deliver superior, reliable and safe performance at budget-friendly prices. HTS Hosting is highly sought-after for its VPS, as well as for its different types of hosting services and it has clients from every part of the world. Windows Managed VPS, Linux Managed VPS, Windows Self-managed VPS, and Linux Self-managed VPS are offered by HTS Hosting at very low prices while ensuring the commitment to provide unsurpassable quality of service. That is the reason that it has emerged as the most trusted and preferred hosting service provider globally.

Source: https://www.htshosting.org/knowledge-base/server/216/rotating-a-domain-s-dnssec-keys-on-a-server