The configuration change I requested has still not been executed. Why is this? - Knowledgebase / Tech / Automatiserad DNSSEC - Support Portal | Registry Services

The configuration change I requested has still not been executed. Why is this?

Updated 29 Oct, 2021

There are several requirements that must be met before a change is carried out.  (Changes to an already signed domain are normally made within one day, while signing a previously unsigned domain takes three days.)

Kindly verify that your request meets the following requirements prior to contacting registrar support:

  1. All three scans must find the same data.
  2. The domain name is in the status ACTIVE.
  3. The domain must not be in Registry Lock!
  4. The CDS record set does not contain syntactic or semantic errors.
  5. If CDNSKEY records are published, they must match the published CDS records.
  6. No more than six CDS records per domain.
  7. DNSSEC validation must succeed for each and every name server. All name servers must publish the same CDS RR-set, but not the same DNSKEY RR-set. Therefore, validation must be checked for each name server.