How to enable DNSSEC for your domain name
Customers’s domain names hosted on POST name servers (ns1,2,3.pt.lu) could profit from DNSSEC.
Please contact first dns@post.lu to enable DNSSEC name server switch for your user account.
After having applied the necessary permissions to your POST DNS Mgmt account you may proceed.
IMPORTANT NOTE:
When changing from standard name services to DNSSEC or backwards, please be aware that your domain name could not have applied any other DNS (record or contact) modifications, as the process of DNSSEC validation and activation may take at least 1 hour.
To switch to DNSSEC, you must login to POST’s DNS Mgmt portal.
If you did forget your password, please use the ‘Forgot your password’ link on the login panel.
If you don’t have yet a login account to access our DNS Mgmt portal, please contact our CallCenter 8002 8004 (for residential customers) or contact your sales manager @POST/DEEP (for professional customers).
Once logged in – use ‘DOMAINS – Domain inventory’ in the upper horizontal menu to get a list of the domain names assigned to your user account (Billing Number).
On the right side of a domain name, click on the 3 dots (…) to select ‘Modify name servers and zone’ .
On top of the panel, you should have a selection of name server groups:
- Full name service
- DNSSEC name service
Select the DNSSEC name service, proceed to the next panel (Go to step 2) , don’t forget to select the ‘General terms and conditions’ on bottom of step 2 and finally ‘Send order’ to have processed your request.
When the order to switch from Full to DNSSEC name service has finished successfully on your POST’s DNS Mgmt portal, it might still take some time until all DNSSEC information has been spread worldwide and mostly the registry of your domain name has also signed and validated your DNSSEC configuration.
You may use some online tools to check DNSSEC validation.
For instance: https://dnsviz.net/
Any CLI commands like ‘dig’ (available on most Linux & Mac based systems) may also be used to check DNSSEC status.
How to disable DNSSEC for your domain name
Login and notes are similar as for the DNSSEC enabling part.
Once logged in – use ‘DOMAINS – Domain inventory’ in the upper horizontal menu to get a list of the domain names assigned to your user account (Billing Number).
On the right side of a domain name, click on the 3 dots (…) to select ‘Modify name servers and zone’ .
On top of the panel, you should have a selection of name server groups:
- Full name service
- DNSSEC name service
Select the Full name service, proceed to the next panel (Go to step 2) , don’t forget to select the ‘General terms and conditions’ on bottom of step 2 and finally ‘Send order’ to have processed your request.