Question Generating New DNSSEC keys

[Freddie Bleiweiss]

How do we generate new DNSSEC keys for a previously signed domain? After making some DNS changes we see the following when generating a DNSreport from dnsstuff.com:

ns.XXXX.org. appears to have a signed A record with a key I can no longer find keyTag=48423
ns.XXXX.org. appears to have a signed A record with a key keyTag=30450
ns.XXXX.org. appears to have a signed A record with a key I can no longer find keyTag=48423
ns.XXXX.org. appears to have a signed A record with a key I can no longer find keyTag=48423

Assumption is that we need to regenerate the DNSSEC keys to resolve the issue. Plesk documentation refers to the following utility. We can't find this option.



OS is CentOS 7.5.1804 (Core). Plesk Onyx Version 18.8.11 Update #16 DNSSEC license is current.

Any help would be appreciated

 

[IgorG]

Please read carefully this documentation - Configuring DNSSEC for a Domain

To sign a domain zone:

1. Select the domain in Websites & Domains.
2. Go to DNSSEC and click Sign the DNS Zone.