Before enabling enable DNSSEC for your domain, keep the following in mind.
Do not change your name servers while DNSSEC is enabled.
If you do, your domain may not resolve.
Before changing your domain name-servers, disable DNSSEC and wait for at least 72 hours before making such changes.
If you change a web host (or need to transfer a domain) and need to move the account/domain to a new server, remove the Domain Server (DS) records from the registrar before you transfer the domain.
Once you have done that, wait for the changes to propagate before initializing the transfer.
Perform the transfer.
Then manually update the registrar with the new DS records.
If you do not remove the old DS records from the registrar, the domains may produce DNS resolution issues due to invalid DNSSEC responses.
Now that this warning has been issued and you want to proceed, here is how to create A DNSSEC Key In cPanel.
Log in to your cPanel.
Scroll down to Domains.
Click Zone Editor.
In the Zone Editor interface, click DNSSEC in a domain’s row to display the DNSSEC interface.
Click Create Key.
A confirmation message will appear.
Click Create.
The DS Records interface will appear with the keys’ details.
After you have generated the domain’s DNSSEC key, you must configure a Domain Server (DS) record with your domain registrar.
Before adding a DS Record to the domain’s registrar, first:
Determine the digest type that your registrar uses.
Click Copy for the appropriate digest record.
Go to your registrar’s website and add the information that they request for your domain.
