# Enable DNSSEC

This function enables DNSSEC on the domain.



 * After you enable DNSSEC on the domain, you  add the DNS records to your registrar.
 * You  modify the DNSSEC security key. To make any changes, you  disable (and delete) and re-create the DNSSEC security key.



  When you disable the DNS role, the system  this function.

Endpoint: GET /DNSSEC/enable_dnssec
Version: 11.134.0.5
Security: BasicAuth

## Query parameters:

  - `domain` (string, required)
    The domain on which to enable DNSSEC.



 To enable DNSSEC on multiple domains, increment the parameter name. For example: , , .

  - `active` (integer)
    Whether to activate the newly-created key.

*  — Activate the key.
*  — Do  activate the key.
    Enum: 0, 1

  - `algo_num` (integer)
    The algorithm that the system uses to generate the security key.

*  — RSA/SHA-1
*  — DSA-NSEC3-SHA1
*  — RSASHA1-NSEC3-SHA1
*  — RSA/SHA-256
*  — RSA/SHA-512
*  — ECDSA Curve P-256 with SHA-256
*  — ECDSA Curve P-384 with SHA-384



 We recommend that you use  if your registrar supports it.
    Example: 8

  - `key_setup` (string)
    The manner in which the system creates the security key.

*  — Use a single key for both KSK and ZSK. Use this value when the  parameter is greater than .
*  — Use separate keys for KSK and ZSK. Use this value when the  parameter is equal to or less than .
    Enum: "simple", "classic"

  - `nsec3_iterations` (integer)
    The number of times that the system rehashes the first resource record hash operation.

A non-negative integer less than .

Prior to cPanel version 132, this defaulted to .
    Example: 7

  - `nsec3_narrow` (integer)
    Whether NSEC3 will operate in Narrow or Inclusive mode.

In Narrow mode, PowerDNS sends out white lies about the next secure record. Rather than query the resource record in the database, PowerDNS sends the hash plus  as the next secure record.

*  — Narrow mode.
*  — Inclusive mode.
    Enum: 0, 1

  - `nsec3_opt_out` (integer)
    Whether the system will create records for all delegations.

*  — Create records for all delegations.
*  — Create records only for secure delegations.



  select  if you  create records for all delegations.
    Enum: 0, 1

  - `nsec3_salt` (string)
    A hexadecimal string that the system appends to the domain name before it applies the hash function to the name. For more information about the salt value, read the RFC 5155 documentation.

Beginning with cPanel version 132, this parameter also accepts the literal value  to indicate that no salt should be used.

If you do not declare a value, the system defaults to no salt. Prior to cPanel version 132, if you did not declare a value, the system defaulted to a random 64-bit value.
    Example: "1A2B3C4D5E6F"

  - `use_nsec3` (integer)
    Whether the domain will use Next Secure Record (NSEC) or NSEC3 semantics.

*  — Use NSEC3 semantics.
*  — Use NSEC semantics.



 If you use NSEC semantics (), the system ignores the other NSEC3 options.
    Enum: 0, 1

## Response 200 fields (application/json):

  - `apiversion` (integer)
    The version of the API.
    Example: 3

  - `func` (string)
    The name of the method called.
    Example: "enable_dnssec"

  - `module` (string)
    The name of the module called.
    Example: "DNSSEC"

  - `result` (object)

  - `result.data` (object)
    Example: {"enabled":{"example.com":{"enabled":1,"new_key_id":"1","nsec_version":"NSEC3"}}}

  - `result.data.enabled` (object)
    An object containing information about the domains for which the system enabled DNSSEC.
    Example: {"example.com":{"enabled":1,"new_key_id":"1","nsec_version":"NSEC3"}}

  - `result.data.enabled.additionalProperties` (object)
    Information about the domain for which the system
enabled DNSSEC.



This return's name is the  parameter's value.

  - `result.data.enabled.additionalProperties.enabled` (integer)
    Whether the system enabled DNSSEC.

*  — The system enabled DNSSEC.
*  — The system failed to enable DNSSEC.
    Enum: 1, 0

  - `result.data.enabled.additionalProperties.new_key_id` (integer)
    The assigned security key ID.
    Example: 1

  - `result.data.enabled.additionalProperties.nsec_version` (string)
    The version of DNSSEC the system used.

* 
*
    Enum: "NSEC3", "NSEC"

  - `result.errors` (array,null)
    List of errors if the API failed.

  - `result.messages` (array,null)
    List of messages generated by the API.

  - `result.metadata` (object)

  - `result.status` (integer)
    *  - Success.
*  - Failed. Check the  field for more details.
    Enum: 0, 1

  - `result.warnings` (array,null)
    List of warnings generated by the API. Warnings describe non-critical failures or other problematic conditions noted while running a API.