Please follow the steps below: You need to login at the Registry System as Technical Contact. Click on “Domain Name -> DNSSEC -> Update Key”. Search for the domain name that you want to upload / update the keys. Select the domain name listed (using the checkbox on the left […]
What does the term “Published”, “Unpublished”, “Pending Publish”, “Pending Unpublish” and “Non Publishable” means?
Below are the definition of what these words mean: Published – The DS Records have been successfully written into a file to be included in the signing of the zone process. Unpublished – The DS Records has been removed (or set not to be written before it can be written) […]
What would happen if my signature expires and I did not re-sign my zones in time?
To help domain owners, we will send out a DNSSEC reminder 7 days before the expiry date to remind users (Technical Contact) that the signature is expiring and re-signing is needed be done and loaded to the Registry System. If the signature expiry remains unchanged 1 day before the expiry […]
Whom should I contact to if I have problems with my domain names that could be due to DNSSEC?
If you are not the Technical Contact, we suggest that you first check with your technical contact and see if there are any DNSSEC problems there. Of course, you can always contact us by calling +603-89917272 or email at domreg@mynic.my and we will do our best to investigate and help […]
After searching for the domain names that I have enabled DNSSEC, I see terms such as “Protected” and “Not Protected”. What do they mean?
Both the terms “Protected” and “Not Protected” is an attempt by MYNIC to summarize the status of DNSSEC for the domain name. A domain is marked as “Protected” when there is at least 1 KSK that is “Published” (or during “Pending Unpublish”). “Not Protected” is for domain names that either […]
I have enabled DNSSEC and everything DNSSEC is running well. However, I need to change name servers. Why am I not allowed to change my name server settings without Disabling DNSSEC?
MYNIC has place such restriction to protect the user from mistakenly change the name server without making proper consideration of DNSSEC. If the DS Records included in the .my zones for a server that did not match the keys, the domain name will be considered bogus and it cannot be […]
I do not handle my own zone files even though I am the Technical Contact. What can I do to enjoy DNSSEC?
Unfortunately, DNSSEC require a certain degree of control of the zone files as the zone files need to be signed. It would be best then to appoint a party that can handle the zone file signing as your technical contact as there are key management issues that need to be […]
I have enabled DNSSEC for my domain name. However, after I transfer the domain name to another registrant, I no longer have DNSSEC. Why is this so?
Similar to all information that is attached to the domain name, the new registrant would need to provide information of new Administrative Contact, Technical Contact, Billing Contact, name servers, etc. So naturally the new registrant would also need to decide if DNSSEC is to be enabled or not. This is […]
I can see that some of my domain name cannot enable / disable DNSSEC. Why is this so?
The only time a domain name cannot enable / disable DNSSEC is when the domain is pending transfer or pending deletion. Other than that, there is no reason why the domain name could not enable / disable DNSSEC.
I have a stand-by ZSK key that was introduced in the apex zone but was not use during signing (pre-published key). Why is it not displayed on the detail page of “Key Update”?
Please note that when a key is only introduced and not being used in the signing, there will not be RRSIG generated using this key. Therefore the list would not include such keys. This should not cause any concern as ZSK data is only for information and not being part […]