Enable “serve” DNSSEC for an existing secondary zone
- Go to .
- On the Zone list page, click the name of the zone you’d like to edit.
- Expand the Zone settings section.
Do not select the DNSSEC Sign and Serve
Checking this box and submitting the zone will generate new ZSK and KSK for the zone.
- Select a TSIG key or create a new one.
Click Add to change list.
Note: You must review and submit your change list per Review the change list before any changes propagate.