To enable DNSSEC, you need to register information called DS records with a higher name server through the domain registrar (designated business operator). If you use another company's service as a registrar (designated business operator) and use this service only for DNS, you will need to apply for registration of DS records by yourselves. The status of DNSSEC is always "Enabling" and will never change until the registration is complete. If you use the Domain Management Service, you will not have to apply for registration of DS records by yourselves and the registration procedure will be taken care of automatically. Note, however, that it may take a few days until "Enabling" is switched to "Enabled."

In addition, to prevent failure of the validation of DNSSEC signature, the status will not change to "Enabled" unless appropriate reference to DNSSEC-related records such as DNSKEY and RRSIG can be verified. When records are migrated from another company’s service to this service, in most cases the DNSSEC-related records that have been added by this service cannot be reflected onto the migration source's server. As a result, you cannot follow a procedure for migrating the records after the status has changed to "Enabled."

Refer to DNSSEC Management for more information.