How to start use DNSSEC for a domain in .SE

This explains how to get a zone signed with DNSSEC in Sweden with the help of Frobbit!

If Frobbit! is Registrar for your .se-domain and runs DNS for your zone you automatically have DNSSEC and don´t need to do anything.

If you run DNS yourself, you have to go through a few more steps. Look through all of them, and specifically, you should know how you should run DNSSEC before you ask for the DNSSEC service to be added.

  • Make sure Frobbit! is Registrar for the domain. If not, start with sending an email to info@frobbit.se and ask for a Registrar Transfer to Frobbit! and inform us at the same time that you would like DNSSEC.
  • Frobbit! will inform you how to get the authorization code needed from you current Registrar and when we have the code we will first transfer the domain to us.
  • Frobbit! will then activate DNSSEC for the domain, and report to you when this is done.
  • Sign your zone, and publish it. See for example the excellent information by NLNetLabs on how to do it. Important commands (in a unix environment) are (once, to create the keys) dnssec-keygen and (whenever you change the zone) dnssec-signzone.