# How to use DNSSEC **URL:** \ **Category:** DNS\ **Created:** [September 18, 2023, 8:55am UTC](https://forum.hestiacp.com/t/how-to-use-dnssec/11032 "2023-09-18T08:55:46Z")\ **Posts on this page:** 19\ **Page:** 1
**Author:** ![GabrielPL](https://forum.hestiacp.com/user_avatar/forum.hestiacp.com/gabrielpl/32/3669_2.png) [@GabrielPL](https://forum.hestiacp.com/u/GabrielPL)\ **Post date:** [September 18, 2023, 8:55am UTC](https://forum.hestiacp.com/t/how-to-use-dnssec/11032/1 "2023-09-18T08:55:46Z")
hello Is there any manual or information on where or how they generate the keys for dnssec in hetiacp in Ubuntu 22? I want to be able to use dnssec on my domains but I see how to generate the data. note: my servers are configured to a single DNS cluster ![Captura](https://forum.hestiacp.com/uploads/default/original/2X/e/ee72c4c3e7534c6771a2db64e8cdb59ff2b42081.jpeg) regards ---
**Author:** ![Raphael](https://forum.hestiacp.com/user_avatar/forum.hestiacp.com/raphael/32/5217_2.png) [@Raphael](https://forum.hestiacp.com/u/Raphael)\ **Post date:** [September 18, 2023, 9:10am UTC](https://forum.hestiacp.com/t/how-to-use-dnssec/11032/2 "2023-09-18T09:10:31Z")
Have a look at the docs, it should explain all: [DNS clusters and DNSSEC | Hestia Control Panel](https://hestiacp.com/docs/server-administration/dns.html) ---
**Author:** ![GabrielPL](https://forum.hestiacp.com/user_avatar/forum.hestiacp.com/gabrielpl/32/3669_2.png) [@GabrielPL](https://forum.hestiacp.com/u/GabrielPL)\ **Post date:** [September 20, 2023, 10:56pm UTC](https://forum.hestiacp.com/t/how-to-use-dnssec/11032/4 "2023-09-20T22:56:44Z")
hello Where do I find this option in the panel? ![Captura](https://forum.hestiacp.com/uploads/default/original/2X/e/ec3a7f8ee127e9af97c156aa3e93f9fbb7b8c455.jpeg) ---
**Author:** ![eris](https://forum.hestiacp.com/user_avatar/forum.hestiacp.com/eris/32/1241_2.png) [@eris](https://forum.hestiacp.com/u/eris)\ **Post date:** [September 21, 2023, 5:38am UTC](https://forum.hestiacp.com/t/how-to-use-dnssec/11032/5 "2023-09-21T05:38:06Z")
![Screenshot 2023-09-21 at 07.37.32](https://forum.hestiacp.com/uploads/default/original/2X/8/8fd5d1b1cdfcbdf4b149b1ddd500642830141508.png) If the option is not available then it might be not supported by OS or not setup correctly ---
**Author:** ![GabrielPL](https://forum.hestiacp.com/user_avatar/forum.hestiacp.com/gabrielpl/32/3669_2.png) [@GabrielPL](https://forum.hestiacp.com/u/GabrielPL)\ **Post date:** [September 21, 2023, 6:19am UTC](https://forum.hestiacp.com/t/how-to-use-dnssec/11032/6 "2023-09-21T06:19:40Z")
I have installed: Hestia Control Panel v1.8.7 Ubuntu 22.04 (x86\_64) /etc/bind/named.conf.options dnssec-validation auto; Do I have to do some configuration to activate it? regards ---
**Author:** ![eris](https://forum.hestiacp.com/user_avatar/forum.hestiacp.com/eris/32/1241_2.png) [@eris](https://forum.hestiacp.com/u/eris)\ **Post date:** [September 21, 2023, 7:11am UTC](https://forum.hestiacp.com/t/how-to-use-dnssec/11032/7 "2023-09-21T07:11:45Z")
> **[DNS clusters and DNSSEC | Hestia Control Panel](https://hestiacp.com/docs/server-administration/dns)** > > Open-source web server control panel. ---
**Author:** ![GabrielPL](https://forum.hestiacp.com/user_avatar/forum.hestiacp.com/gabrielpl/32/3669_2.png) [@GabrielPL](https://forum.hestiacp.com/u/GabrielPL)\ **Post date:** [September 21, 2023, 7:36am UTC](https://forum.hestiacp.com/t/how-to-use-dnssec/11032/8 "2023-09-21T07:36:41Z")
¿¿?? The link you sent me is the manual that I am following but I do not have the DNSSEC option in my Hestia panel ![Captura](https://forum.hestiacp.com/uploads/default/original/2X/a/a9ca845a375d4fea82741472c477b0c2c65b08f0.jpeg) ---
**Author:** ![eris](https://forum.hestiacp.com/user_avatar/forum.hestiacp.com/eris/32/1241_2.png) [@eris](https://forum.hestiacp.com/u/eris)\ **Post date:** [September 21, 2023, 7:40am UTC](https://forum.hestiacp.com/t/how-to-use-dnssec/11032/9 "2023-09-21T07:40:08Z")
Are you sure in hestia.conf DNS\_CLUSTER\_SYSTEM is changed to Hestia-zone? DNS\_CLUSTER\_SYSTEM=‘hestia-zone’ ---
**Author:** ![GabrielPL](https://forum.hestiacp.com/user_avatar/forum.hestiacp.com/gabrielpl/32/3669_2.png) [@GabrielPL](https://forum.hestiacp.com/u/GabrielPL)\ **Post date:** [September 21, 2023, 10:04pm UTC](https://forum.hestiacp.com/t/how-to-use-dnssec/11032/10 "2023-09-21T22:04:50Z")
Finally I was able to implement it successfully, I had the file /etc/bind/named.conf.options with incorrect configuration. It’s already working. thanks ---
**Author:** ![ImSplifftastic](https://forum.hestiacp.com/letter_avatar_proxy/v4/letter/i/e19b73/32.png) [@ImSplifftastic](https://forum.hestiacp.com/u/ImSplifftastic)\ **Post date:** [October 25, 2023, 9:52pm UTC](https://forum.hestiacp.com/t/how-to-use-dnssec/11032/11 "2023-10-25T21:52:52Z")
Could you explain what changes you made to the configuration file /etc/bind/named.conf.options ---
**Author:** ![eris](https://forum.hestiacp.com/user_avatar/forum.hestiacp.com/eris/32/1241_2.png) [@eris](https://forum.hestiacp.com/u/eris)\ **Post date:** [October 25, 2023, 11:16pm UTC](https://forum.hestiacp.com/t/how-to-use-dnssec/11032/12 "2023-10-25T23:16:50Z")
See [DNS clusters and DNSSEC | Hestia Control Panel](https://hestiacp.com/docs/server-administration/dns.html) ---
**Author:** ![xeruf](https://forum.hestiacp.com/user_avatar/forum.hestiacp.com/xeruf/32/8510_2.png) [@xeruf](https://forum.hestiacp.com/u/xeruf)\ **Post date:** [November 6, 2023, 7:17am UTC](https://forum.hestiacp.com/t/how-to-use-dnssec/11032/13 "2023-11-06T07:17:30Z")
I followed the master-slave guide to the T and still do not have the checkbox. Running `/usr/local/hestia/bin/v-sync-dns-cluster` exits with success. It clearly says to only switch to hestia-zone for the slave, right? This should be clarified in the conversion docs further bewlow as well. ---
**Author:** ![eris](https://forum.hestiacp.com/user_avatar/forum.hestiacp.com/eris/32/1241_2.png) [@eris](https://forum.hestiacp.com/u/eris)\ **Post date:** [November 6, 2023, 7:19am UTC](https://forum.hestiacp.com/t/how-to-use-dnssec/11032/14 "2023-11-06T07:19:06Z")
It should be changed on the master … 1. In `/usr/local/hestia/conf/hestia.conf`, change `DNS_CLUSTER_SYSTEM='hestia'` to `DNS_CLUSTER_SYSTEM='hestia-zone'`. ---
**Author:** ![xeruf](https://forum.hestiacp.com/user_avatar/forum.hestiacp.com/xeruf/32/8510_2.png) [@xeruf](https://forum.hestiacp.com/u/xeruf)\ **Post date:** [November 6, 2023, 7:57am UTC](https://forum.hestiacp.com/t/how-to-use-dnssec/11032/15 "2023-11-06T07:57:02Z")
Thanks, it works now! The the docs need to be adjusted, it is only mentioned in `Preparing your Slave server(s):` ---
**Author:** ![elmo](https://forum.hestiacp.com/user_avatar/forum.hestiacp.com/elmo/32/2165_2.png) [@elmo](https://forum.hestiacp.com/u/elmo)\ **Post date:** [December 10, 2023, 6:38pm UTC](https://forum.hestiacp.com/t/how-to-use-dnssec/11032/16 "2023-12-10T18:38:19Z")
Can this be done on a both servers that are acting as both master/slave and master/slave? " 'DNS\_CLUSTER\_SYSTEM=‘hestia-zone’` " I have tested this out on some test servers they seem to work but im not sure if it will cause any problems down the line, would like your feedback @eris ---
**Author:** ![bestperson](https://forum.hestiacp.com/letter_avatar_proxy/v4/letter/b/c2a13f/32.png) [@bestperson](https://forum.hestiacp.com/u/bestperson)\ **Post date:** [March 29, 2024, 6:44pm UTC](https://forum.hestiacp.com/t/how-to-use-dnssec/11032/17 "2024-03-29T18:44:54Z")
Hi everyone, is it possible to use " ‘DNS\_CLUSTER\_SYSTEM=’ hestia-zone’ " if the site is connected to CF? Probably not, then how do I implement DNSSEC using DNS CF and hestia-zone at the same time, or do I not understand correctly? ---
**Author:** ![eris](https://forum.hestiacp.com/user_avatar/forum.hestiacp.com/eris/32/1241_2.png) [@eris](https://forum.hestiacp.com/u/eris)\ **Post date:** [March 30, 2024, 12:49am UTC](https://forum.hestiacp.com/t/how-to-use-dnssec/11032/18 "2024-03-30T00:49:38Z")
If you use DNS via CF then manage it in Cloudflare no support for Hestia for it ---
**Author:** ![DGA](https://forum.hestiacp.com/user_avatar/forum.hestiacp.com/dga/32/7549_2.png) [@DGA](https://forum.hestiacp.com/u/DGA)\ **Post date:** [April 5, 2024, 4:48pm UTC](https://forum.hestiacp.com/t/how-to-use-dnssec/11032/19 "2024-04-05T16:48:16Z")
This is the same issue with me… ---
**Author:** ![pwd](https://forum.hestiacp.com/letter_avatar_proxy/v4/letter/p/b782af/32.png) [@pwd](https://forum.hestiacp.com/u/pwd)\ **Post date:** [August 18, 2025, 6:51am UTC](https://forum.hestiacp.com/t/how-to-use-dnssec/11032/20 "2025-08-18T06:51:24Z")
Does anyone know how to set up DNSSEC on subdomains? In the subdomain dns settings, dnssec is checked, but since subdomains cannot be validated at the domain provider, the subdomain will be invalid. It should use the dnssec of the main domain, but on Hestia cp you can only set up dnssec separately for the main domain and the subdomain. Thanks.