Issue DNSSEC do not add entries in DNS Settings?

[Azurel]

Server operating system version

AlmaLinux 8.9

Plesk version and microupdate number

18.0.65#2

Yes there is a tutorial for this Configuring DNSSEC for a Domain
But it stops exactly where my problem starts. I have a subscription with one domain. When I activate DKIM for mail, entries are automatically inserted in DNS settings. This does not happen with DNSSEC and you have to enter them after activation manually?

I can't add them. The "domain name" is required and show error "This required field is empty. You need to specify a value.".

So after "DNSSEC status Signed". What exactly do I have to do now?

Background: I tested DNSSEC in Plesk, because my Registrar (IP-Projects.de) said:

DNSSEC is not supported by our DNS servers, as these are the redundant name servers of InternetX and unfortunately do not support DNSSEC by default.

So I thought I could activate my own DNS with DNSSEC on my server with Plesk myself and remove in IP-Projects the current DNS settings.
Am I wrong here? So far I have always set DNS at the domain registrar and not in Plesk. Can anyone help me? I would be very happy to receive help. Thanks a lot!

(mxtoolbox) DNSKey Lookup said "DNS Record not found"

 

[AYamshanov]

• Resolved - Cannot add DS records on domain DNS
• Resolved - Can not add DS-records, domain is required field since update

For a domain in Plesk, whose parent zone is outside Plesk, update DS records at the domain’s registrar. (c) Configuring DNSSEC for a Domain

You need to specify DS records on the Registrar's side.

 

[Azurel]

Thanks for the answer, but that's probably not quite the solution. Is there perhaps a support article that deals with this topic in more detail?

After I created the DNSKEY in Plesk (my root server is from Hetzner) I gave the DS records to my registrar. But he said "I then need to know which of your nameservers we can store for the domain.".

Creating my own nameservers makes no sense, as they have to have 2 IPs from different networks. Is it possible to pass on the nameservers from the hoster? As far as I understand, it is sufficient for Plesk to create and manage the DSNKEY as primary, but the other nameservers must also know this.

I'm a bit lost as to what steps are now required after creating the DNSKEY. Passing the DNSKEY to the registrar is not enough.

 

[scsa20]

I think the real question is: Are you managing your DNS on your web server itself or is your DNS being managed by your registrar or a third party DNS service such as Cloudflare? Because if your DNS is managed by a third party DNS service or by your registrar then you do not need to worry about configuring DNSSEC on your server itself. You only want to do that if you are configuring using your own servers for DNS. Likewise, I have in the past configured 2 different NS servers by creating 2 GLUE records pointing to the same IP address but that is only with some registrar's so your mile may vary for that.

In either case, if you are not using the DNS on the server itself, disable it, go to the email settings and get the DMIK records you will need to configure in your DNS provider such as your registrar or whatever. Otherwise we need more information of the current DNS set up.