Enable DNSSEC
Enable DNSSEC for a domain.
Nameserver behavior
| Nameserver type | Key fields (flags, algorithm, protocol, public_key) |
|---|---|
| Atom / Parking nameservers | Ignored. DNSSEC is fully auto-managed: Atom generates and rotates keys automatically. You do not need to supply any key fields — if you do, they are silently discarded. |
| Custom nameservers | Required. All four fields must be provided. The supplied key is pushed directly to the upstream registrar. |
Note: If your domain uses Atom or Parking nameservers (e.g.
ns1.atom.com,ns1.squadhelp.com,ns1.atomregistrar.com), the algorithm, protocol, flags, and public key in the request body have no effect. DNSSEC is automatically applied and managed by Atom.
Authorizations
Registrar API Bearer token. Obtain from dashboard at /dashboard/seller/api-access after requesting Registrar API access.
Path Parameters
Domain name (e.g. example.com)
Body
DNSSEC key fields for enabling DNSSEC.
Atom / Parking nameservers: All fields are optional and will be ignored — DNSSEC is auto-managed.
Custom nameservers: flags, algorithm, protocol, and public_key are required. digest_type is optional (defaults to 2 / SHA-256).
DNSKEY flags. 256 = ZSK (Zone Signing Key), 257 = KSK (Key Signing Key). Ignored for Atom/Parking nameservers.
256, 257 256
DNSKEY algorithm number. Ignored for Atom/Parking nameservers.
| Value | Algorithm |
|---|---|
3 | DSA/SHA-1 |
5 | RSA/SHA-1 |
6 | DSA-NSEC3-SHA1 |
7 | RSASHA1-NSEC3-SHA1 |
8 | RSA/SHA-256 |
10 | RSA/SHA-512 |
12 | GOST R 34.10-2001 |
13 | ECDSA P-256/SHA-256 |
14 | ECDSA P-384/SHA-384 |
15 | Ed25519 |
16 | Ed448 |
17 | SM2/SM3 |
23 | GOST R 34.10-2012 |
3, 5, 6, 7, 8, 10, 12, 13, 14, 15, 16, 17, 23 13
DNSKEY protocol. Must be 3 (the only valid value per RFC 4034). Ignored for Atom/Parking nameservers.
3 3
Base64-encoded public key material from your DNS provider. Ignored for Atom/Parking nameservers.
"AwEAAaz/tAm8yeTHkmTpF84YtQQKDE2S..."
Digest algorithm used to compute the DS record returned in the response. Defaults to 2 (SHA-256). Ignored for Atom/Parking nameservers.
| Value | Algorithm | Notes |
|---|---|---|
1 | SHA-1 | Legacy; avoid for new deployments |
2 | SHA-256 | Recommended (default) |
3 | GOST R 34.11-94 | Requires server-side GOST engine |
4 | SHA-384 | High-security deployments |
1, 2, 3, 4 2