Use Cloudflare DNSSEC with DNSimple
Table of Contents
If your domain is registered at DNSimple and its DNS is hosted at Cloudflare, turn on DNSSEC in Cloudflare, then add the DS record Cloudflare gives you in DNSimple. DNSimple, as the registrar, sends the DS record to the registry, which completes the DNSSEC chain.
Before starting
- The domain must already use Cloudflare’s name servers, as in Use Cloudflare with DNSimple.
- Not all TLDs support DNSSEC. If DNSimple shows an error when you add the DS record, contact support.
Enable DNSSEC at Cloudflare
Follow Cloudflare’s instructions to enable DNSSEC for the domain. Cloudflare then shows the values you need to create the DS record at your registrar.
Add the DS record in DNSimple
To add Cloudflare’s DS record
- From the list, click the domain.
- Click the tab on the left side.
- Click in the card.
- Click .
- Copy each value from Cloudflare into the matching field. Depending on the TLD, DNSimple shows either the DS-Data fields (, , , ) or the KEY-Data fields. Adding a DS record describes both.
- Click to save it.
To check that the DNSSEC chain is complete, use one of the DNSSEC diagnostic tools.
Have more questions?
If you have any questions or need assistance enabling DNSSEC at Cloudflare, contact support, and we’ll be happy to help. You can also read more about domain and DNS security at DNSimple.