Add a CNAME record
A CNAME record creates an alias for another domain name, which DNS looks up. This is useful, for example, if you point multiple CNAME records to a single A record in order to simplify DNS maintenance.
To add a CNAME record, perform the following steps:
- If this account owns more than one domain, select the domain that you wish to manage from the Domain menu.
- Enter CNAME record in the Name and CNAME text box.
- Click Add CNAME Record.
Delete a record
To delete an A or CNAME record, perform the following steps:
- If this account owns more than one domain, select the domain that you wish to manage from the Domain menu.
- Click the Delete link next to the record that you wish to remove.
- Click Delete.
DNSSEC
Important:
This feature only appears if your System Administrator installs PowerDNS in either of the following interfaces:
- WHM's Initial Setup Assistant.
- WHM's Nameserver Selection interface (Home >> Service Configuration >> Nameserver Selection).
DNS Security Extensions (DNSSEC) add a layer of security to your domains' DNS records. DNSSEC uses digital signatures and cryptographic keys to validate that DNS responses are authentic. These digital signatures protect clients from various forms of attack, such as Spoofing or a Man-in-the-Middle attack.
Important:
- DNSSEC keys remain on a server after you terminate an account. If you restore an account on the same server from which you deleted it, the account’s DNSSEC keys remain valid.
- If you transfer the account to another server, you must reconfigure DNSSEC for the domains and update the domain server records on the registrar. The system does not include DNSSEC keys in an account’s backup file.
Enable DNSSEC
To enable DNSSEC for a domain, perform the following steps:
-
If this account owns more than one domain, select the domain that you wish to manage from the Domain menu.
-
Click Enable. The system will generate a new DNSSEC key, and a new line will appear that contains the following information:
ColumnDescriptionKey Tag An integer value that identifies the domain's DNSSEC record. Algorithm The record's encrypted signature. Digest Type The algorithm type that constructs the digest. Select the Digest Type that your registrar supports. Digest An alpha-numeric string that the algorithm generates.
Important:
After you generate the domain's DNSSEC key, you must configure a Domain Server (DS) record with your domain registrar. Click the links below for DS record instructions with some of the most popular domain registrars.
Disable DNSSEC
To disable DNSSEC for a domain, perform the following steps:
- If this account owns more than one domain, select the domain that you wish to manage from the Domain menu.
-
Click Disable.
Important:
After you generate the domain's DNSSEC key, you must delete the DS record with your domain registrar. Click the links below for DS record instructions with some of the most popular domain registrars.
