DNSSEC must be configured in both cPanel and at the domain registrar.
- Open cPanel → Domains → Zone Editor.
- Select DNSSEC for the domain.
- Click Create Key.
- For normal setup, use the quick creation workflow unless you specifically require custom key parameters.
- After creation, open View DS Records.
- Determine which digest type your registrar accepts and copy the matching DS information.
- Sign in to the registrar and add the requested DS record values.
Do not stop after creating the cPanel key. DNSSEC is not complete until the correct DS record is published at the registrar.
After DNS has updated, validate the chain using a reputable DNSSEC validation tool.
