# Te Whakamahi i DNSSEC mo to Rohe

Source: https://support.kapsulehost.com/mi-nz/domains-dnssec

Tē DNSSEC e whakatairite ana i tō wāhi DNS mā te whakapaipai pāngarau, ā, ka āhei te KapsuleHost ki te whakamatau i a ia mō ngā rohe katoa e kāhoa mai ana i tō DNS.

Kaore i te DNSSEC, ko te whakautu DNS he karaka āhuatanga noa iho, ā, ki te āhei te kaiwhiwhiwhi ki te whakauru i te whakautu takatawhito ki te puna o te kaitira, ka tuku i ngā mōkihi ki tō pūnaha, ā, tū tonu te pae pūtipi i tō rohe. Ka tutaki te DNSSEC i tērā mā te tīkanga tuuturu mai i tō wāhi ki te rāpuitanga. Ko tēnei arataki e kōrero ana mō te whakamatau, te whakaputa i te tuhinga DS, te pānui i ia whakataunga, te whakatikatika i te hononga whakaharikoa, me te ture raupapa kotahi anake e whai hua ana ina ka whakamutu koe.

## Kāore Anō Koe I Timatangia

Ko te **DNSSEC** kaari ka puta noa iho ina e kāhoa ana te wāhi DNS o te rohe ki ngā ingoa rohe KapsuleHost. Mēnā kaore e kite koe i a ia i runga i te tīpare Security, e whakautu ana tō rohe mai i te DNS o tētahi atu.

Ngā ingoa rohe o KapsuleHost, ngā wha katoa:

```
ns1.kapsulecloud.com
ns2.kapsulecloud.com
ns3.kapsuledns.com
ns4.kapsuledns.com
```

> **Note:** Hoatu ngā wha, i ia wā. Tō mea nui ngā momo pūtake kupu rerekē e rua: ka kore tētahi raru i tē pūtake pāpāhou kotahi ki te whakamate i ia tō ā mātou ingoa rohe i te wā kotahi. Tirohia [Ingoa Rohe](https://support.kapsulehost.com/mi-nz/nameservers) mō te āhuatanga o te whakatāuri i te rohe ki a rātou.

## Te Āhei DNSSEC

1. Takihi ki a [KPanel](https://kpanel.kapsulehost.com) ā, pīkau **Rohe** i te pae taha maui.
2. Pīkau te rohe e hiahia ana koe ki te whakapaipai.
3. Whakatūtuki te tīpare **Security**. Ko te **DNSSEC** kaari ka noho i te timatangia, ki runga ake i te Privacy me te Lock.
4. Pānuitia te whakataunga o nāianei i runga i te kaari: **Āheiria**, **E Tatari ana** rānei **Āhei**.
5. Pīkau **Āhei DNSSEC**.

Ka whakaae a KPanel me "DNSSEC enabled. Add the DS record to your registrar to activate."

![DNSSEC card on the domain Security tab in KPanel](https://support.kapsulehost.com/help/screenshots/domains-dnssec.bb5b7310.webp)

Ko te whakapaipai i tō wāhi he haurua noa iho o te mahi. Kia te pokapū, kāore he tuhinga DS e rite ana i te wāhi pāpāhou i te rāpuitanga, ka kaore he huarahi mō ngā tira āta whakatika ki te mārama he mea kua whakapaipai tō wāhi, ā, kaore he whakamanatautanga. Ko te waahanga e whai ake nei kaore he waahi i te kāore.

## Te Whakaputa i te Tuhinga DS

Ko te tuhinga DS (Delegation Signer) te whakatūpuranga o tō kī whakapaipai, e mau ana i tē taumata kotahi i tō pūtea rohe. Ko tēnei te mea e whakarei i te wāhi kua whakapaipai ki te wāhi kua whakamanatau.

### Mēnā Kua Rēhitā te Rohe i KapsuleHost

Kaore he mahi. Ka tuku a KapsuleHost i te tuhinga DS ki te rāpuitanga mō koe, ā, ka whakatiki e ia. Ko te kaari e kī ana tērā: "Active, managed automatically. We publish and renew the DS record at the registry for you."

Mēnā e hiahia ana koe ki te kite i ngā uara, pīkau **Tirohia ngā taipitopito hangarau**.

### Mēnā Kua Rēhitā te Rohe Ki Tētahi Atu

Me kawe koe i te tuhinga DS i te ringa. Ko a KapsuleHost e whakapaipai ana i te wāhi; ko tō kaiwhakarite anake te kaipuke e whakatakoto i te tuhinga DS i te pāpāhou.

1. I runga i te DNESSEC kaari, whakatunukitia te **Tuhinga DS: tāpiri ki tō kaiwhakarite** whakaaro.
2. Kōpī ngā uara e toru:

| Wāhi | He aha tēnei |
|---|---|
| **Tūtohu Kī** | He tohu tau pokapū mō te kī whakapaipai |
| **Mahi Whakapaipai** | Te tau mahi whakapaipai |
| **Momo Whakahuihuia** | Te momo tūtei i whakamahia mō te whakahuihuia |

3. Takihi ki tō kaiwhakarite ā, rapuhia tōna waahanga DNSSEC, rānei DS Tuhinga. Ka rereketanga te kupu, engari kei raro tonu i ngā tautuhinga āhuatanga rohe.
4. Whakapiri ngā uara pēnei i te ataata ā, tiaki.

> **Warning:** Ko te tuhinga DS kaore e rite ki te kī e whakamahi ana ia ki te whakapaipai i tō wāhi, he raru nui ake i te kaore he tuhinga DS i a ia. Ka tiakitia e ngā tira whakamanatau ia ia ia ia te wāhi katoa o tō rohe hei mea takatawhito ā, ka kāore e whakaue ki a ia, ka kopara tō paetukutuku me tō īmēra ki a ia mō te waahanga nui o te ipurangi. Kōpī ngā uara, kaua e tuhi anō, ā, whakaaturia te whakataunga ka tae ki Active i muri iho.

## Te Pānui i te Whakataunga

| Whakataunga | Tōna tikanga | He aha te mea me mahi |
|---|---|---|
| **Āheiria** | Kaore te wāhi e whakapaipaihia. | Pīkau **Āhei DNSSEC** mēnā e hiahia ana koe. |
| **E Tatari ana** | Kua hangaia ngā kī ā, e whakapaipaihia ana te wāhi, rānei kaore anō te tuhinga DS i kite ki te pāpāhou. | Tatari. Mēnā kei te kaiwhakarite o tē atu, whakaputa i te tuhinga DS inaianei. |
| **Āhei** | Ko te wāhi kua whakapaipai ā, kua oti te hononga whakamanatau. | Kaore. Ko tēnei te whāinga. |

## Te Tirotiro Mai i Waho

Kaua e whakatokotahi ki te kupu o te whakaaro. Manatuitui mai i te tuhinga pokapū:

1. Whakatūtuki te **Rohe**, ā, **Rapu WHOIS** i KPanel.
2. Tukuna tō rohe ā, pīkau **Rapu**.
3. Pānuitia te rarangi **DNSSEC**. E whakaatu ana i **Whakapaipai** rānei **Kāore i whakapaipai** i runga i te mea e whakaputa ana te rāpuitanga.

**Whakapaipai** tērā, me **Āhei** i te whakaaro, te tikanga kua oti te hononga i te mea tūturu.

## Te Whakatikatika i DNSSEC

Mēnā ka tu te whakataunga i te E Tatari ana, rānei ka pūrongo te tirotiro o tē atu i te hononga whakaharikoa, ka pēhea te DNSSEC kaari **Whakatikatika DNSSEC**. Ko te whakaae e whakamārama tīkanga: "KapsuleHost will re-sign your DNS zone and re-publish the DS record at your registrar. This is safe and reversible."

Whakaaetia ā, ka puta "DNSSEC repair queued. The status will update shortly." Uta ake te kaari i muri i te meneti e rua.

> **Tip:** Rārangi mō te Whakatikatika i mua i te Āheiria. Ka whakatikatika te Whakatikatika i te hononga kaore he waahi e kore te wāhi e whakapaipaihia, ā, ko te āheiria me te āhei anō te tikanga ko te unwinding o te tuhinga DS me te hanga i te hononga katoa i te timatanga anō.

## Te Āheiria DNSSEC

Ko te whakamutu i te DNSSEC he mea tūturu tūturu, kia mēnā ka mahia e koe ngā mahi e rua i te ota tika. Ka mahia i te ota kāore i te tika, ka whakamutu tō rohe i te ipurangi.

> **Important:** TANGOHIA TE TUHINGA DS I TŌ KAIWHAKARITE, ā, tatari kia mukua mai i te pāpāhou. Ko ia noa iho ka āheiria DNSSEC i konei.
>
> Mēnā ka āheiria e koe te whakapaipai ā, tū tonu te whakaputa i te tuhinga DS, ka kite ia ia te rohe e kī ana he whakapaipai, engari kaore e puta he whakatairite motuhake, ā, ka kāore e whakautu mō ia. Ka kopara tō paetukutuku me tō īmēra mō te tangata i muri i te tira whakamanatau, arā, i nāianei, ko te nuinga o ngā tira pokapū nui me te maha o ngā ISP. Kaore he mea i tō ake tautuhinga ka ahua harikoa.

Ko te raupapa tika:

1. **I tō kaiwhakarite**, whakamutu te tuhinga DS. Mēnā ko KapsuleHost tō kaiwhakarite, tīkina i a mātou kia tangohia i mua i te mahi i te whakaaro.
2. **Whakaaturia kua mukua ia mai i te pāpāhou.** Rapuhia te ingoa rohe pāpāhou āhuatanga mō te tuhinga DS ā, tatari kia tūturu ia kaore e whakautu. Kaua e whakatokotahi ki te whakautu ā-tūtei mai i te tira pokapū: ka tohu tonu te tira ā-tūtei i te tuhinga DS tawhito ka roa nei i muri i te tuku a te rāpuitanga, ā, ko te whakapaipai i tērā kōrero tawhito anō te raru i te tohu tēnei tohu.
3. Tatari i te TTL o te wāhi pāpāhou i runga i tērā.
4. **Ko ia noa iho**, i KPanel, whakatūtuki te tīpare **Security** o te rohe ā, pīkau **Āheiria** i te DNSSEC kaari. Ka puta "DNSSEC disabled."

## Ina He Uara te DNSSEC

Āheia mō te mea katoa i kona he kaupapa mō tētahi ki te kōpare i a koe: ngā toa moko ipurangi, mea katoa e whakahaere ana i ngā takihi, i te kōrerotanga takoha, ngā rohe tohu tautoko, ā, ngā rohe katoa e tuku ana i te īmēra e hiahia ana koe ki te whakatokotanga.

Kaore he utu mō a ia i runga i te Kapsule DNS, ā, kia tino tae mai te tuhinga DS ki tēnei waahi, kaore he mahi me whakatikitiki, ina koa i te rohe kua rēhitā i a mātou i kona e whakaputa ā, whakatiki e matou.

> **Note:** Ko te DNSSEC e whakapaipai ana i te whakautu DNS kaore i takatawhitohia. Kaore e ā-hari i ōu rapu DNS, kaore e whakakapi i te TLS i tō paetukutuku, ā, kaore e whakatuuturu i tō īmēra i a ia. Ka tu tēnei ki te taha o ēnei. Mō te whakatuuturu īmēra, tirohia [SPF, DKIM me te DMARC Whakamāramahia](https://support.kapsulehost.com/mi-nz/spf-dkim-dmarc).

## Te Whakatika Raru

**Kaore he DNSSEC kaari i runga i te tīpare Security.** Kaore te DNS o te rohe e kāhoa i ngā ingoa rohe KapsuleHost. Neke te wāhi ki te Kapsule DNS i mua: tirohia [Ingoa Rohe](https://support.kapsulehost.com/mi-nz/nameservers).

**Kua tu te whakataunga i te E Tatari ana mō ngā haora.** I te kaiwhakarite o tē atu, kaore pea i whakaputa te tuhinga DS, rānei i whakaputa me te uara kāore i tika. Whakataurite ngā uara e toru i te whakaaro ki te mea e whakaatu ana tō kaiwhakarite, pūkoro i te pūkoro. Ā, whakamahi **Whakatikatika DNSSEC**.

**Kua heke iho tō paetukutuku i te tino whakaūnga i te mea DNSSEC.** Ko tēnei te rahua takatawhito DS. Whakahoktia te tuhinga DS i te kaiwhakarite ki te rite i te mea e whakaputa ana a KapsuleHost, rānei āheia te DNSSEC i KPanel kia whakapaipaihia anō te wāhi, ā, whakamahi **Whakatikatika DNSSEC**. Kua haia te oti i te TTL o te wāhi pāpāhou.

**Kua rahua te tono.** Kaore te kaari i tae ki te pūnaha DNS. Uta ake ā, ngana anō, ā, mēnā he ngana tonu, [whakatuwhera i te tīkete tautoko](https://support.kapsulehost.com/mi-nz/opening-a-support-ticket) me tō ingoa rohe.

**Kei te whakatau koe ki te whakawhiti i tēnei rohe.** Whakatika te DNSSEC i mua i te whakawhiti, ehara i te waenganui. Tirohia [Te Whakawhiti i Tō Rohe Ki Tētahi Kaiwhakarite Kē](https://support.kapsulehost.com/mi-nz/domains-transfer-out).

Pānui e pā ana: [Te DNS Aro Noa](https://support.kapsulehost.com/mi-nz/dns-basics), [Ingoa Rohe](https://support.kapsulehost.com/mi-nz/nameservers), me [Te Rēhitatanga me te Whakahaere i ngā Rohe .nz](https://support.kapsulehost.com/mi-nz/domains-nz-rules).