---
title: "Enabling DNSSEC for Cloudflare’s name servers"
canonical_url: "https://www.zone.lv/help/kb/enabling-dnssec-for-cloudflares-name-servers/"
post_type: "ht_kb"
published: "2024-05-02T07:02:06+00:00"
modified: "2025-01-10T09:05:48+00:00"
language: "en"
author: "Ants Korsar"
taxonomies:
  ht_kb_category:
    - name: "Nameserver"
      url: "https://www.zone.lv/help/kb-categories/nameserver/"
    - name: "Security"
      url: "https://www.zone.lv/help/kb-categories/security/"
    - name: "Technical (Nameservers, DNS-records, etc)"
      url: "https://www.zone.lv/help/kb-categories/domain-technical-info/"
  ht_kb_tag:
    - name: "Cloudflare"
      url: "https://www.zone.lv/help/kb-tags/cloudflare/"
    - name: "DNS"
      url: "https://www.zone.lv/help/kb-tags/dns-en/"
    - name: "DNSSEC"
      url: "https://www.zone.lv/help/kb-tags/dnssec-en/"
    - name: "domainmanagement"
      url: "https://www.zone.lv/help/kb-tags/domainmanagement/"
    - name: "Domains"
      url: "https://www.zone.lv/help/kb-tags/domains-en/"
---

# Enabling DNSSEC for Cloudflare’s name servers

After deploying Cloudflare name servers and starting activation of DNSSEC in the Cloudflare control panel, Cloudflare will issue the DS record information to be added to the domain in [My Zone](https://my.zone.lv/en/zwebadmin) control panel.

To do this, log in to My Zone, select the domain from the `Domains` menu, click on it and from the left menu click on `DNSSEC`.

![](https://www.zone.lv/static/sites/5/DNSSEC_ENG.png)

In this window you can add a DS record. To do this, open `Advanced Settings` Advanced Settings and click `plus icon button` to add a DS record.

Enter the data from the Cloudflare DS record page as follows:

- In the **Key Tag** text box, enter the **Key Tag** value;
- Select **Key Type** according to the value in the **Flags** text box (in most cases it is KSK);
- select **Algorithm** according to the **Digest Type** value – if Digest Type is SHA256, select ECDSA-P256-SHA256 (13);
- enter **Public Key** value in the **Public** text box.

It is not necessary to add a Private Key.

![](https://www.zone.lv/static/sites/5/dnssec-2-1024x587.png)

Save the addition of the DS record by pressing `Confirm the change` button and DNSSEC will be activated.