Applicable to:
- Plesk Onyx
Symptoms
- DNSSEC extension is installed and corresponding DS records are added for domain example.com in Domains > example.com > DNS Settings
- The online-tool dnscheck.pingdom.com shows the following warning message for domain example.com:
CONFIG_TEXT: Broken chain of trust DNSKEY found at child, but no DS was found at parent.
Cause
The chain of trust is not complete: the registrar requests
.com
parent zone for domain example.com to sign DS records with their own keys to complete chains of trust, but no DS record was found on the parent-side servers.
Resolution
Contact the registrar to configure DNSSEC on their side.
More details about the issue can be found here:
https://serverfault.com/questions/885180/cannot-setup-dnssec-broken-chain-of-trust/885189
Comments
0 comments
Please sign in to leave a comment.