UltraDNS creates two DS resource records
- One for each digest type (SHA-1, SHA-256)
- Give either the SHA-256 record or both of the DS resource records as shown in the UltraDNS Managed Services Portal to your domain registrar (most registrars provide a method to publish DS resource records in their management interface).
- The following information is required to publish your DS record(s):
example.com. IN DS 39442 8 1 48D5EC8927D5E2B4A1C51808B386C49C8C2C1F9B
Key Tag - This is an integer value less than 65536 used to identify the DNSSEC record for the domain name.
Algorithm - This identifies the cryptographic algorithm used to generate the signature. Valid values are:
1: RSA/MD5
2: Diffie-Hellman
3: DSA/SHA1
5: RSA/SHA-1
6: DSA-NSEC3-SHA1
7: RSASHA1-NSEC3-SHA1
8: RSA/SHA-256
10: RSA/SHA-512
12: GOST R 34.10-2001
13: ECDSA Curve P-256 with SHA-256
14: ECDSA Curve P-384 with SHA-384
2: Diffie-Hellman
3: DSA/SHA1
5: RSA/SHA-1
6: DSA-NSEC3-SHA1
7: RSASHA1-NSEC3-SHA1
8: RSA/SHA-256
10: RSA/SHA-512
12: GOST R 34.10-2001
13: ECDSA Curve P-256 with SHA-256
14: ECDSA Curve P-384 with SHA-384
Digest Type - This identifies the algorithm used to construct the digest.Valid values are:
1: SHA-1
2: SHA-256
3: GOST R 34.11-94
4: SHA-384
2: SHA-256
3: GOST R 34.11-94
4: SHA-384
Digest - This is the digest integer value.
Please note the ? icons throughout the portal and click them for more details