IONOS DNSSEC with Cloudflare

Hello,

I wanted to make this short guide available to anyone who wants to enable DNSSEC with Cloudflare on IONOS hosted domains without having to email IONOS.

There are two ways to do this:

  1. Using the API portal from IONOS
  2. A tool like Postman

Requirements:
Nameservers have been set to Cloudflare at IONOS.
An API token has been ordered from IONOS.

The steps are almost identical:
First you have to find out the ZoneID of the domain.
To do this, use the GET /v1/domainitems call.

The corresponding entries are then set with the PUT domains/v1/domainitems/ZONEID/dnssec
command with the following body:

{
    "secDns": 
    {
        "dsData": 
        [
            {
                "keyTag": 2371,
                "alg": 13,
                "digestType": 2,
                "digest": "YOURDIGEST",
                "keyData":
                {
                    "flags": 257,
                    "protocol": 3,
                    "alg": 13,
                    "pubKey": "YOURPUBLICKEY"
                }
            }
        ]
    }
}

Cheers, V-Reacher

4 Likes

Appreciate the input and time you took to make this.

CJ313

2 Likes

+1 @dmartin1 agree that is an expert post even if we just have a ExpertReply tag!

1 Like

This topic was automatically closed 2 days after the last reply. New replies are no longer allowed.