Skip to main content

Enable DNSSEC for a zone

This endpoint allows you to enable DNSSEC for a zone.

This feature requires the domain to have a DNSSEC compatible TLD, be registered via Nameshield and hosted on Nameshield Premium nameservers as primary.
If a registry lock is set on the domain, it must be unlocked to perform this operation.

When you enable DNSSEC, Nameshield generates keys with the ECDSA algorithm (13), signs the zone, and adds the DS record to the corresponding registry.
To enable DNSSEC on a subzone, you must first enable DNSSEC on the parent zone. The DS record is automatically added in the parent zone.

Endpoint​

POST /dns/v3/zones/{zonename}/dnssec/secure

Parameters​

NameLocationRequiredTypeDefault valueDescription
zonenameURLYesStringThe zone name

Response​

A success message

Example Request​

POST /dns/v3/zones/example.com/dnssec/secure

Example Response​

{
    "message": "OK"
}