The process to disable DNSSEC is simple but must be done in a specific order:
- Unsign at registrar by removing the DNSSEC key at your domain registrar
- Wait for the DS record TTL (usually 24 hours)
- Unsign the domain from the DNSSEC tab on the Domain Records page within the UltraDNS interface
- Doing this the same day of registrar unsigning will cause problems.
Additional Information
- Doing this in the opposite order can result in non-resolution until DNSSEC is disabled at the registrar.