How to add DNSSEC to a domain name?

Identity Digital Registry supports Algorithm ranges including the 6-14 range. Our SRS allows all algorithms defined at the IANA website: http://www.iana.org/assignments/dns-sec-alg-numbers/dns-sec-alg-numbers.xml.

DNSSEC can be added via EPP or via the web portal

EPP Domain Create with DNSSEC

Code

<?xml version="1.0" encoding="UTF-8" standalone="no"?>
<epp xmlns="urn:ietf:params:xml:ns:epp-1.0">
 <command>
   <create>
    <domain:create xmlns:domain="urn:ietf:params:xml:ns:domain-1.0">
      <domain:name>domain_name</domain:name>
      <domain:period unit="y">2</domain:period>
      <domain:registrant>registrant_contact</domain:registrant>
      <domain:contact type="admin">admin_contact</domain:contact>
      <domain:contact type="tech">tech_contact</domain:contact>
      <domain:authInfo>
        <domain:pw>Password_1</domain:pw>
      </domain:authInfo>
    </domain:create>
   </create>
   <extension>
     <secDNS:create xmlns:secDNS="urn:ietf:params:xml:ns:secDNS-1.1">
       <secDNS:dsData>
       <secDNS:keyTag>12345</secDNS:keyTag>
       <secDNS:alg>1</secDNS:alg>
       <secDNS:digestType>1</secDNS:digestType>
    <secDNS:digest>2BB183AF5F22588179A53B0A98631FAD1A292118</secDNS:digest>
       <secDNS:keyData>
          <secDNS:flags>257</secDNS:flags>
          <secDNS:protocol>3</secDNS:protocol>
          <secDNS:alg>1</secDNS:alg>
          <secDNS:pubKey>AQPJ////4Q==</secDNS:pubKey>
       </secDNS:keyData>
       </secDNS:dsData>
     </secDNS:create>
   </extension>
   <clTRID>Test</clTRID>
 </command>
</epp>
‍

EPP Domain DNSSEC Update

Code

<?xml version="1.0" encoding="UTF-8" standalone="no"?>
  <epp xmlns="urn:ietf:params:xml:ns:epp-1.0"
       xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">
    <command>
      <update>
        <domain:update
         xmlns:domain="urn:ietf:params:xml:ns:domain-1.0">
          <domain:name>classen.testone</domain:name>
        </domain:update>
      </update>
      <extension>
        <secDNS:update
         xmlns:secDNS="urn:ietf:params:xml:ns:secDNS-1.1">
          <secDNS:rem>
            <secDNS:dsData>
              <secDNS:keyTag>257</secDNS:keyTag>
              <secDNS:alg>8</secDNS:alg>
              <secDNS:digestType>2</secDNS:digestType>
              <secDNS:digest>d4d8be8becb97c4b32b8660720f9e05561a9b80db8949e393ddc78df1137c4f9</secDNS:digest>
          <secDNS:keyData>
            <secDNS:flags>257</secDNS:flags>
            <secDNS:protocol>3</secDNS:protocol>
            <secDNS:alg>8</secDNS:alg>
            <secDNS:pubKey>AwEAAbSUJwKgTiw4/fAdKdeinHB5FiiUAJw2UwiFY0HF8ZunQ4ZuTR+5d3YGKP0pVFq/vE9LvPyn7wANRJOJVKr8NgmadQ/tx3dpEOQ8RyE1LzLogPXYbQHk6Qdv8fCD2erp9KS7R26ZwR/fJNikrbp184LYGLdHKEUdA/oXWnqNMFXFkVC0RWDgBjyOAYK1x7kph+YJstjbJae3F8VbViTP1vjFqgNLfmb2v0jRBGam96XEha4==</secDNS:pubKey>
          </secDNS:keyData>
        </secDNS:dsData>
          </secDNS:rem>
          <secDNS:add>
           <secDNS:dsData>
              <secDNS:keyTag>58789</secDNS:keyTag>
              <secDNS:alg>8</secDNS:alg>
              <secDNS:digestType>2</secDNS:digestType>
              <secDNS:digest>d4d8be8becbd8660720f9e05561a9b80db8949e393ddc78df1137c4f9</secDNS:digest>
          <secDNS:keyData>
            <secDNS:flags>58689</secDNS:flags>
            <secDNS:protocol>3</secDNS:protocol>
            <secDNS:alg>8</secDNS:alg>
            <secDNS:pubKey>AwEAAbSUJwKgTiw4/fAdKdeinHB5FqUAJw2UwiFY0HF8ZunQ4ZuTR+5d3YGKP0pVFq/vE9LvPyn7wANRJOJVKr8NgmadQ/tx3dpEOQ8RyE1LzLogPXYbQHk6Qdv8fCD2erp9KS7R26ZwR/fJNikrbp184LYGLdHKEUdA/oXWnqNMFXFkVC0RWDgBjyOAYK1x7kph+YJstjbJaAbOHye9oLQZue3F8VbViTP1vjFqgNLfmb2v0jRBGam96XEha4==</secDNS:pubKey>
          </secDNS:keyData>
        </secDNS:dsData>
          </secDNS:add>
        </secDNS:update>
      </extension>
      <clTRID>ABC-12345</clTRID>
    </command>
  </epp>

Web portal create/update

1. Fill in the domain create or update information
2. Fill in the DNSSEC information as shown below
3. Click add
4. Click register/update

Note that duplicated DNSSEC records are not allowed by the system if you try to add duplicated values via the web portal you will see the following error.