The ZoneCheck tool performs several tests on your domain to ensure that it is correctly configured and can be
safely delegated onto your nameservers.
For many registries, a predelegation test is performed before registrations or nameserver changes. That's why we provide this tool to help you configuring your domain according to registry's technical rules.
After completing the test, please correct all fatal errors or contact your system administrator / hosting provider if you do not have the required skills.
Please note that the domain registry will not accept your nameservers if this test is not successfully completed (result SUCCESS)
Domain
The domain (ie: zone) that should be tested (ie: the domain name
that you want to register).
Primary
The nameserver that is considered as primary (the one in
the SOA record if it is public).
Secondary
The secondary nameservers (all the NS records associated
with the domain, except for the one listed above).
IPs
List of IP addresses associated with the nameserver.
- they are only required if they can't be resolved
(ie: they are in the domain that you want to register).
- if you have several addresses you must use a space or
a comma as the separator.
- the form accepts IPv4 and IPv6 addresses.
DNSSEC tests
Set the DNSSEC tests policy to mandatory, if not tests will be warnings
DS and Hash Algorithm
Gives the hash of the public key and the algorithm used to do that
The hash of the key must be encoded in hexadecimal (blanks are removed).
The Hash Algorithm is the number given by IANA and corresponding to the algorithm.
DNSKEY
Gives the public key used as a Security Entry Point.
The key must be encoded in base64 (blanks will be removed).
The time required to completely verify a zone can take from 30 seconds up to 5 minutes depending on the network speed of the server being accessed. If it takes more than a minute it generally means we are encountering problems accessing your nameservers (configuration error, firewall, ...) and are waiting for timeout.