Need help with DS records for Account Custom Nameservers in .bank domain

Application Performance DNS & Network
1

What is the name of the domain?

not domain specific

What is the issue you’re encountering

attempting to set up DS key for account custom nameserver

What feature, service or problem is this related to?

DNSSEC

What are the steps to reproduce the issue?

Hi everyone,

I’m working with a .bank domain and trying to set up account custom nameservers (ACDNS).

Here’s what I’ve done so far:

  1. Successfully configured the account custom nameservers in my account settings, which yields the required IPv4/IPv6 addresses to be created at the registrar
  2. Created A and AAAA records at my registrar for ns1.example.bank

The issue I’m running into is with the DS (Delegation Signer) records, which are required for .bank domains. I can’t figure out where to obtain the correct DS records for the account custom nameservers that have been provided.

For those unfamiliar, .bank requires DNSSEC implementation, and therefore DS records are mandatory. While I understand how to get DS records for a regular zone, I’m stumped on how to get the appropriate DS records specifically for the account custom nameservers.

Has anyone successfully implemented ACDNS with a .bank domain who could point me in the right direction? Specifically:

  1. Where do I get the DS records for the account custom nameservers?
  2. Are these generated somewhere in the control panel that I’m missing?
  3. Do I need to generate these myself somehow?

Any guidance would be greatly appreciated!

2

I haven’t used custom nameservers, but the DS should be the same as for your normal nameservers. You can always check directly via DNS:

dig +short laudian.de @perla.ns.cloudflare.com cds
2371 13 2 B083CAAD9ABD42FA0D2E385929C45A988F13F843C1601C8EE947A23D B187B583

Just use your domain and your nameservers instead.

3

This topic was automatically closed 15 days after the last reply. New replies are no longer allowed.