Make sure that you have enabled DNSSEC in that zone in your Cloudflare account. You will find the information needed for the registrar in your Cloudflare dashboard while doing that.
You might want to try removing all DNSSEC related entries at your registrar. Once your domain is active on Cloudflare, you can always update your registrar with the DNSSEC values provided by Cloudflare.
I just removed the DNSSEC information at my Registrar and toggled it off.
Per the document I enabled it on the Cloudflare side like you asked then I enabled it on the registrars side with the ds data that I got from Cloudflare.
I waited 24 hours and nothing appeared to have changed. I then removed all DNSSEC data on the registrars side and disabled it as you suggested and it still appeared to be stuck.
I then re-added all the data from the Cloudflare site after canceling the DNSSEC update and trying it again from scratch. But now you’re saying I have invalid material, do you mean the DS data I entered on the registrars site? Can you please let me know how you are seeing that so I can follow?
I got the domain but nothing is hosted behind it. I don’t have a website that it will point to other than the tunnels I want to set up.
So maybe a question I need to ask is what about the A records? It looks like the lack of A records is may be the issue and not DNSSEC.
I will have the appliance running on my network so my understanding was that I didn’t need to have the Domain resolve to the IP of anything on my network.
So pardon my stupid question but if it does need an A record what do I point it to?