Entrust Datacard

Entrust Certificate Services Support Knowledge Base

Last Modified: 2017-09-15 14:33:47.0

How to add a Certification Authority Authorization (CAA) record in a hosted DNS

Article Number: 70639

User-added image

If you use a hosted DNS service, here is how you add a CAA record.

Please refer to the table below for instructions. Please note that several hosted DNS service providers are yet to support CAA. This article will be continuously updated as Hosted DNS providers adopt CAA.
 
Hosted DNS provider:How to add a CAA record:
dnsimpleSee our technote here for complete process.
DNS Made Easy

See our technote here for complete process.

Dyn Managed DNSSee our technote here for complete process.
Amazon Route 53See our technote here for complete process.
Constellix DNS1. Select Managed DNS and click on Domains.
2. Select the Domain Name you want to add an A record to.
3. Under the CAA Records section, select the + icon to add a record.

4. In this screen, you will add the record information. Follow the steps below:

A) Name: This will be the identifier for your record. It is important to note, the domain name is automatically appended to the “Name” field of the record.
B) TTL: Edit the TTL. Time to Live is measured in seconds and is the amount of time the record will cache in resolving name servers and web browsers.
C) Providers: In the drop down menu choose your CA (certificate authority) provider. The hostname of your provider will automatically populate the Value box. If your provider is not listed, then choose other, and enter the hostname of the provider in the Value box.
D) Tag: Tags allow you to choose how you want certificates to be issued by the CA. Each CAA record can contain only one tag-value pair. Refer to the Configuration section for more details on the kinds of tags.
E) Note: Add a helpful note with keywords so you can search for your records later.
F) Save and Close: Save your changes. Don’t forget to commit your changes.

CloudfareSee our technote here for complete process.
ClouDNSSee our technote here for complete process.
Afraid.org Free DNSAfraid.org Free DNS does support CAA, however, in order to seek support with adding a CAA record, please contact them directly using the contact information provided here.
Neustar UltraDNSNeustar Ultra DNS does support CAA, however, in order to seek support with adding a CAA record, please contact them directly using the contact information provided here.
Gandi1. Using the Gandi DNS, from the zone file edition page, choose a new version and then on the right, select the “expert mode” for editing your zone.

2. Add the CAA record to the zone file. To add Entrust, for example:
(using "example.com"):

example.com.   CAA 0 issue "entrust.net"

3. After you have saved your version of the zone, remember to activate it for it to take effect.
 
Domeneshop (Domainnnameshop)Domeneshop (Domainnnameshop) does support CAA, however, in order to seek support with adding a CAA record, please contact them directly using the contact information provided here.
Google Cloud DNSSee our technote here for complete process.
GoDaddySee our technote here for complete process.
BuddyNSSupported - Please contact BuddyNS for instructions.
ezreg.com (Netregistry)Supported - Please contact ezreg.com for instructions.
Google Domains DNSNot yet supported.
Hurricane Electric Free DNSSupported- Please contact Hurricane Electric Free DNS for instructions.
Mythic BeastsSupported - Please contact Mythic Beasts for instructions.
NameBrightSupported - Please contact NameBright for instructions.
Neustar UltraDNSSupported - Please contact Neustar UltraDNS for instructions.
NS1Supported - Please contact NS1 for instructions.
Nucleus NVSupported - Please contact Nucleus NV for instructions.
ZiloreSupported - Please contact Zilore for instructions.

If you have any questions or concerns please contact the Entrust Certificate Services Support department for further assistance: 

Hours of Operation: 
Sunday 8:00 PM ET to Friday 8:00 PM ET 
North America (toll free): 1-866-267-9297 
Outside North America: 1-613-270-2680 (or see the list below) 
NOTE: Smart Phone users may use 1-800 numbers for one-touch dialing.
Otherwise, it is very important that international callers dial the UITF format exactly as indicated. Do not dial an extra "1" before the "800" or your call will not be accepted as an UITF toll free call.
 

CountryNumber
Australia0011 - 800-3687-7863
1-800-767-513
Austria00 - 800-3687-7863
Belgium00 - 800-3687-7863
Denmark00 - 800-3687-7863
Finland990 - 800-3687-7863 (Telecom Finland)
00 - 800-3687-7863 (Finnet)
France00 - 800-3687-7863
Germany00 - 800-3687-7863
Hong Kong001 - 800-3687-7863 (Voice)
002 - 800-3687-7863 (Fax)
Ireland00 - 800-3687-7863
Israel014 - 800-3687-7863
Italy00 - 800-3687-7863
Japan001 - 800-3687-7863 (KDD)
004 - 800-3687-7863 (ITJ)
0061 - 800-3687-7863 (IDC)
Korea001 - 800-3687-7863 (Korea Telecom)
002 - 800-3687-7863 (Dacom)
Malaysia00 - 800-3687-7863
Netherlands00 - 800-3687-7863
New Zealand00 - 800-3687-7863
0800-4413101
Norway00 - 800-3687-7863
Singapore001 - 800-3687-7863
Spain00 - 800-3687-7863
Sweden00 - 800-3687-7863 (Telia)
00 - 800-3687-7863 (Tele2)
Switzerland00 - 800-3687-7863
Taiwan00 - 800-3687-7863
United Kingdom00 - 800-3687-7863
0800 121 6078
+44 (0) 118 953 3088



 

Affected Products:

  • Entrust IdentityGuard Consumer Server 8.0 English Linux
  • Entrust IdentityGuard Enterprise Server 8.0 English Linux