Enable DNSSEC for a domain.
| Nameserver type | Key fields (flags, algorithm, protocol, public_key) |
|---|---|
| Atom / Parking nameservers | Ignored. DNSSEC is fully auto-managed: Atom generates and rotates keys automatically. You do not need to supply any key fields — if you do, they are silently discarded. |
| Custom nameservers | Required. All four fields must be provided. The supplied key is pushed directly to the upstream registrar. |
Note: If your domain uses Atom or Parking nameservers (e.g.
ns1.atom.com,ns1.squadhelp.com,ns1.atomregistrar.com), the algorithm, protocol, flags, and public key in the request body have no effect. DNSSEC is automatically applied and managed by Atom.
Registrar API Bearer token. Obtain from dashboard at /dashboard/seller/api-access after requesting Registrar API access.
Domain name (e.g. example.com)
DNSSEC key fields for enabling DNSSEC.
Atom / Parking nameservers: All fields are optional and will be ignored — DNSSEC is auto-managed.
Custom nameservers: flags, algorithm, protocol, and public_key are required. digest_type is optional (defaults to 2 / SHA-256).
DNSKEY flags. 256 = ZSK (Zone Signing Key), 257 = KSK (Key Signing Key). Ignored for Atom/Parking nameservers.
256, 257 256
DNSKEY algorithm number. Ignored for Atom/Parking nameservers.
| Value | Algorithm |
|---|---|
3 | DSA/SHA-1 |
5 | RSA/SHA-1 |
6 | DSA-NSEC3-SHA1 |
7 | RSASHA1-NSEC3-SHA1 |
8 | RSA/SHA-256 |
10 | RSA/SHA-512 |
12 | GOST R 34.10-2001 |
13 | ECDSA P-256/SHA-256 |
14 | ECDSA P-384/SHA-384 |
15 | Ed25519 |
16 | Ed448 |
17 | SM2/SM3 |
23 | GOST R 34.10-2012 |
3, 5, 6, 7, 8, 10, 12, 13, 14, 15, 16, 17, 23 13
DNSKEY protocol. Must be 3 (the only valid value per RFC 4034). Ignored for Atom/Parking nameservers.
3 3
Base64-encoded public key material from your DNS provider. Ignored for Atom/Parking nameservers.
"AwEAAaz/tAm8yeTHkmTpF84YtQQKDE2S..."
Digest algorithm used to compute the DS record returned in the response. Defaults to 2 (SHA-256). Ignored for Atom/Parking nameservers.
| Value | Algorithm | Notes |
|---|---|---|
1 | SHA-1 | Legacy; avoid for new deployments |
2 | SHA-256 | Recommended (default) |
3 | GOST R 34.11-94 | Requires server-side GOST engine |
4 | SHA-384 | High-security deployments |
1, 2, 3, 4 2