{"id":7082,"date":"2024-09-29T15:15:13","date_gmt":"2024-09-29T15:15:13","guid":{"rendered":"https:\/\/www.smarthost.au\/blog\/?p=7082"},"modified":"2024-12-12T15:21:21","modified_gmt":"2024-12-12T15:21:21","slug":"generating-dnssec-keys-in-cpanel","status":"publish","type":"post","link":"https:\/\/www.smarthost.au\/blog\/generating-dnssec-keys-in-cpanel","title":{"rendered":"Generating DNSSEC keys in cPanel"},"content":{"rendered":"\n
Having a domain delegated to our DNS servers, the keys can be generated in the cPanel hosting panel. The keys should be configured according to the parameters that are supported by the domain registrar.<\/p>\n\n\n\n
<\/div>\n\n\n\n
How to generate DNSSEC keys in cPanel?<\/strong><\/h2>\n\n\n\n
1. From the \u201cDomains\u201d tab, select the \u201cZone Editor\u201d option. <\/p>\n\n\n
\n<\/figure><\/div>\n\n\n
<\/div>\n\n\n\n
2. Select the domain for which you want to generate DNSSEC keys. Then click on the \u201cDNSSEC\u201d option.<\/p>\n\n\n
\n<\/figure><\/div>\n\n\n
<\/div>\n\n\n\n
3. Next, to create a key, click on the option \u201cCreate Key\u201d.<\/p>\n\n\n
\n<\/figure><\/div>\n\n\n
<\/div>\n\n\n\n
4. In the next window you will see the default keys proposed by cPanel. To add them, select \u201cCreate\u201d. You can also create keys according to your own settings. To create your own keys, select \u201cCustomize\u201d.<\/p>\n\n\n
\n<\/figure><\/div>\n\n\n
<\/div>\n\n\n\n
5. By selecting \u201cCustomize\u201d you can create a key according to our own settings:<\/p>\n\n\n\n
<\/div>\n\n\n\n
Key Setup<\/strong>:<\/p>\n\n\n\n
\n
Classic<\/strong>: Creates a ZSK<\/strong> (Zone Signing Key) and a KSK<\/strong> (Key Signing Key) keypair.<\/li>\n\n\n\n
Simple<\/strong>: Creates a CSK<\/strong> (Combined Signing Key) which will be used as both the ZSK<\/strong> and KSK<\/strong>.<\/li>\n<\/ul>\n\n\n\n
<\/div>\n\n\n\n
Algorithm:<\/strong> Selection of the algorithm that will be used to create the keys.<\/p>\n\n\n\n
\n
RSA\/SHA-256 (Algorithm 8)<\/strong> \u2013 most commonly supported by domain registrars<\/li>\n\n\n\n
RSA\/SHA-512 (Algorithm 10)<\/strong> \u2013 similar to RSA\/SHA-256, generates longer 512-bit hashes so it is more secure but less efficient than RSA\/SHA-256<\/li>\n\n\n\n
ECDSA Curve P-256 with SHA-256 (Algorithm 13)<\/strong> \u2013 recommended by cPanel, provides high security with smaller key size compared to RSA<\/li>\n\n\n\n
ECDSA Curve P-384 with SHA-384 (Algorithm 14)<\/strong> \u2013 higher security than ECDSA with P-256 with SHA-256. Less efficient than the 13 algorithm but still more efficient than RSA-based algorithms. Suitable for environments requiring very high levels of security.<\/li>\n<\/ul>\n\n\n\n
<\/div>\n\n\n\n
Status:<\/strong> Allows to activate or deactivate the key.<\/p>\n\n\n\n
<\/div>\n\n\n
\n<\/figure><\/div>\n\n\n
<\/div>\n\n\n\n
6. Now that you have the keys created, you can add them in the DNS settings in the domain management panel (where the domain is registered). To get the necessary data, click in cPanel on \u201cView DS Records\u201d next to the generated key, and then fill in the data on the domain management panel side.<\/p>\n\n\n\n<\/figure>\n\n\n\n
<\/div>\n\n\n\n
To download the public key that must be entered at the domain registrar, expand the line with the generated key by clicking the \u201c>\u201d sign and then click \u201cPublic DNSKEY\u201d to display the key. The process is shown in the screenshot below.<\/p>\n\n\n\n<\/figure>\n\n\n\n
![\"\"](\"https:\/\/www.smarthost.au\/blog\/wp-content\/uploads\/2024\/09\/zone_editor-1.png\")
<\/figure><\/div>\n\n\n<\/div>\n\n\n\n![\"\"](\"https:\/\/www.smarthost.au\/blog\/wp-content\/uploads\/2024\/09\/dnssec.png\")
<\/figure><\/div>\n\n\n<\/div>\n\n\n\n![\"\"](\"https:\/\/www.smarthost.au\/blog\/wp-content\/uploads\/2024\/09\/dnssec2-1024x206-1.png\")
<\/figure><\/div>\n\n\n<\/div>\n\n\n\n![\"\"](\"https:\/\/www.smarthost.au\/blog\/wp-content\/uploads\/2024\/09\/dnssec3.png\")
<\/figure><\/div>\n\n\n<\/div>\n\n\n\n![\"\"](\"https:\/\/www.smarthost.au\/blog\/wp-content\/uploads\/2024\/09\/dnssec4.png\")
<\/figure><\/div>\n\n\n<\/div>\n\n\n\n![\"\"](\"https:\/\/www.smarthost.au\/blog\/wp-content\/uploads\/2024\/09\/dnssec5-1024x222-1.png\")
<\/figure>\n\n\n\n<\/div>\n\n\n\n![\"\"](\"https:\/\/www.smarthost.au\/blog\/wp-content\/uploads\/2024\/09\/public_key-1024x349.png\")
<\/figure>\n\n\n\n