Add a record
To add a record, perform the following steps:
If this account owns more than one domain, select the domain that you wish to manage from the Domain menu.
- Select a record type:
A — This record maps hostnames to IP addresses. A records are essential because they allow DNS servers to identify and locate your website and its various services on the Internet. Without appropriate A records, your visitors cannot access your website, FTP site, or email accounts.
Remember:
cPanel configures your DNS records so that visitors can resolve your website and its services, such as FTP and email. Only add A records when you add a service that cPanel & WHM or your service provider does not provide.
AAAA — This record maps hostnames to IPv6 addresses.
CNAME — This record creates an alias for another domain name, which DNS looks up. This is useful, for example, if you point multiple CNAME records to a single A record in order to simplify DNS maintenance.
Note:
You cannot point a CNAME record at an IP address.
SRV — This record provides information about available services on specific ports on your server.
Note:
The SRV record must point at a hostname with an A (or AAAA) record. You cannot point an SRV record at a CNAME record.
- TXT — This record contains text information for various services to read. For example, TXT records can specify data for the SPF (Sender Policy Framework) or DKIM (Domain Keys Mail Identifier) email authentication systems.
Note:
On servers that run CentOS 7, you may see a
named
warning about the absence of SPF resource records on DNS.- This warning is not relevant on CentOS 7 servers, because RFC 7208 deprecated SPF records. CentOS 7 servers use TXT records instead of SPF records.
- Red Hat 7.1 and CentOS 7.1 both contain
bind-9.9.4-23.el7
, which is an updated version of BIND that complies with RFC 7208. To resolve this issue, update your operating system to a version that contains the updated version of BIND. For more information, read the the Red Hat Bugzilla case about SPF record errors.
- Enter the appropriate information for the record type that you select.
- Click Add A Record.
Notes:
- The Advanced Zone Editor interface does not display DKIM records.
- You can use cPanel's Authentication interface (cPanel >> Home >> Email >> Authentication) to manage SPF and DKIM records.
Edit a record
To edit a record, perform the following steps:
If this account owns more than one domain, select the domain that you wish to manage from the Domain menu.
- Click Edit next to the record that you wish to edit.
- Change the information in the text boxes as necessary.
- Click Edit Record to save your changes, or click cancel to discard them.
Delete a record
To delete a record, perform the following steps:
If this account owns more than one domain, select the domain that you wish to manage from the Domain menu.
- Click Delete next to the record that you wish to remove.
- Click Delete.
DNSSEC
Important:
This feature only appears if your System Administrator installs PowerDNS in either of the following interfaces:
- WHM's Initial Setup Assistant.
- WHM's Nameserver Selection interface (WHM >> Home >> Service Configuration >> Nameserver Selection).
DNS Security Extensions (DNSSEC) add a layer of security to your domains' DNS records. DNSSEC uses digital signatures and cryptographic keys to validate that DNS responses are authentic. These digital signatures protect clients from various forms of attack, such as spoofing or a man-in-the-middle attack.
Important:
- DNSSEC keys remain on a server after you terminate an account. If you restore an account on the same server from which you deleted it, the account’s DNSSEC keys remain valid.
- If you transfer the account to another server, you must reconfigure DNSSEC for the domains and update the domain server records on the registrar. The system does not include DNSSEC keys in an account’s backup file.
To transfer an account with DNSSEC enabled domains, perform the following steps for each domain:
- Remove the Domain Server (DS) records from the registrar.
- Wait for the changes to propagate (up to 72 hours).
- Disable DNSSEC on the domain (optional).
- Transfer the account to the new server.
- Enable DNSSEC on the new server.
If you do not remove the old DS records from the registrar, the domains may produce DNS resolution issues due to invalid DNSSEC responses.
Enable DNSSEC
To enable DNSSEC for a domain, perform the following steps:
If this account owns more than one domain, select the domain that you wish to manage from the Domain menu.
Click Enable. The system will generate a new DNSSEC key, and a new line will appear that contains the following information:
Column Description Key Tag An integer value that identifies the domain's DNSSEC record. Algorithm The record's encrypted signature. Digest Type The algorithm type that constructs the digest. Select the Digest Type that your registrar supports. Digest An alpha-numeric string that the algorithm generates.
Important:
After you generate the domain's DNSSEC key, you must configure a Domain Server (DS) record with your domain registrar. Click the links below for DS record instructions with some of the most popular domain registrars.
Disable DNSSEC
To disable DNSSEC for a domain, perform the following steps:
- If this account owns more than one domain, select the domain that you wish to manage from the Domain menu.
Click Disable.
Important:
After you generate the domain's DNSSEC key, you must delete the DS record with your domain registrar. Click the links below for DS record instructions with some of the most popular domain registrars.