Issue DANE option not available for single domain

[EmperorFPI]

Server operating system version

Ubuntu 22.04.3 LTS

Plesk version and microupdate number

Plesk Obsidian Version 18.0.56

Trying to add DANE support for emails and all but one domain on the server has the option to add DANE.

I can't find any difference between the domains that have the option and the one that doesn't.

How can I find what is happening with that single domain where the Let's Encrypt option to add DANE isn't visible??

 

[Peter Debik]

Has the domain DKIM enabled?

 

[EmperorFPI]

there is a DKIM txt record in the DNS or is there somewhere else that should be done?

 

[Peter Debik]

Is DKIM checked on the mail settings dialog page of the domain?

 

[EmperorFPI]

Yes

 

[Peter Debik]

Did you follow the steps in (Plesk for Linux) Hardening Server Connections Using DANE ?

 

[EmperorFPI]

I watched and haven't had to do that with any of the other domains. Simply reissuing the cert allowed me to add the DANE part automatically. Not sure why this domain is the exception.
I'll try to add according to video, just seems odd.

 

[Peter Debik]

It's hard to tell what's going on remotely through the forum posts. Maybe you could open a support ticket with Plesk support? They will for sure be able to assist you directly on the server and they will certainly solve the issue. Sign in here: https://support.plesk.com . In case you bought your license from a reseller: The support subscription comes with a 30 days free trial period.

 

[nmdpa3]

Curious about this as well...on some servers we see the DANE option from the let's encrypt re-issue screen and on others we do not. I can't seem to find the pattern of why its on some and not on others. Our server setup procedures are the same on every new server.

 

[AYamshanov]

Hi guys,

I faced a similar issue on my test server, here is a short list of why the DANE checkbox may be missing (it is some conditions when we doubt in possibility of protecting the service with DANE),

• Plesk should be 18.0.55 or later; SSL It! should be 1.14.4 or later,
• DNS service is enabled (server-wide, Plesk works as a primary for a domain),
• Mail service is enabled (server-wide, per domain),
• DKIM is enabled (server-wide, per domain),
• a domain has an MX record, the MX is resolvable, and points to the server's IP address (could be checked right from SSH Terminal extension)

 

[Atramasis]

I have a similar issue. Some domains have the DANE option if I want to renew, some don't. But sometimes this option is available again if I issue a cert without DANE and than go back to reissue. Now I changed the name of the mx server and it is not available again... Crazy. I have Ubuntu 24.04, all newest versions of Plesk (.61) and SSL It!.
DNS, Mail, DKIM enabled. MX ist resolvable.