How to Disable DNSSEC for a Domain Registered with OVH

If your domain is registered with OVH, you can enable or disable DNSSEC directly from the OVH management panel in just a few steps.

What Is DNSSEC?

DNSSEC (Domain Name System Security Extensions) is a security mechanism that protects DNS records from tampering by using digital signatures. While DNSSEC improves security, there are situations where it may need to be temporarily disabled, such as during DNS migrations or troubleshooting DNS resolution issues.

Disabling DNSSEC in OVH

Step 1

Log in to the OVH Control Panel:

https://www.ovh.com/manager

Step 2

From the top menu, select:

Web Cloud

Step 3

In the left-hand menu, expand:

Domains

and select the domain for which you want to modify the DNSSEC settings.

Step 4

Open the:

General Information

tab.

Step 5

Locate the section labeled:

DNS Security (DNSSEC)

Step 6

Use the toggle switch to:

• Disable DNSSEC
• Enable DNSSEC

depending on your requirements.

Step 7

Confirm the change if prompted by OVH.

DNS Propagation

After enabling or disabling DNSSEC, the change requires DNS propagation.

DNS propagation is the process of distributing DNS changes across internet service providers and DNS resolvers worldwide.

During this period:

• Some users may still see the previous DNSSEC configuration.
• DNS resolution behavior may differ depending on location and DNS cache status.

How Long Does Propagation Take?

Most DNSSEC changes become visible within a few hours, but full propagation may take up to:

24 hours

depending on DNS cache expiration times and resolver updates.

When Should DNSSEC Be Disabled?

You may consider disabling DNSSEC when:

• Migrating DNS services to another provider.
• Troubleshooting DNS resolution issues.
• Resolving DNSSEC validation errors.
• Reconfiguring DNS zones and DS records.

Important Note

If DNSSEC is enabled for your domain, make sure that the DNS zone and DS records are configured correctly. Incorrect DNSSEC settings can cause your website, email services, and other DNS-dependent services to become unreachable.

Summary

To disable DNSSEC for an OVH domain:

1. Log in to the OVH Manager.
2. Go to:

Web Cloud → Domains

3. Select your domain.
4. Open the:

General Information

tab.
5. Locate:

DNS Security (DNSSEC)

6. Toggle the option to disable DNSSEC.
7. Allow up to 24 hours for DNS propagation.

Once propagation is complete, the new DNSSEC status will be active across the internet.