Enable DNSSEC for domains registered at another company
Domain Name Security Extensions (DNSSEC) add an extra layer of security to your domain names by attaching digital signature (DS) records to their DNS information. Your domain must meet the following criteria before enabling DNSSEC. If you don't meet these criteria, see DNSSEC FAQ for information about using self-managed DNSSEC.
To enable DNSSEC for domains registered at another company
- Log in to your GoDaddy account.
- From the top menu, click the DNS tab, and select Manage Zones.
- Enter the domain name you want to use and click Search.
- Under Advanced Features, click DNSSEC.
- Under Enabled, click On.
- In the Email key change notifications field, enter your email address, and click Apply.
- Within a few minutes, we generate your DS records. Click View DS records.
- Copy the DS record information that displays. To update your nameservers, submit this DS record information to your domain name's registrar.
If you receive the following error message, your attempt to enable DNSSEC failed: Save failed. Zone contains invalid CNAME record and cannot be DNSSEC enabled. To resolve the issue, go to the Records section (above the Advanced Features section), locate the CNAME record that conflicts with another record in your file, and edit or delete one of the conflicting records. For instance, you might have a CNAME record and an A record that have the same www hostname.