We have updated the DNSSEC interface under cPanel’s Zone Editor interface (cPanel >> Home >> Domains >> Zone Editor) that it now display a recommendation when you should rotate a key.
WARNING
Before deleting the domain’s DNSSEC key in cPanel & WHM, remove or disable the Domain Server (DS) record with your domain registrar.
After editing the DS record, wait at least 24 - 72 hours for the changes to propagate.
Once the changes propagate, you may delete the DNSSEC key in cPanel.
To delete a DNSSEC key, perform the following steps:
Log in to your cPanel.
Scroll down to Domains.
Click Zone Editor.
In the Zone Editor interface, click DNSSEC in a domain’s row to display the DNSSEC interface.
Click Delete next to the appropriate record.
Click Continue to confirm that you wish to delete the security record.