How to add DNS CAA record to a DNS zone file

Jul 12, 2020

How to add DNS CAA record to a DNS zone file

Introduction

This article will provide the guidelines in adding a Certification Authority Authorization (CAA) record to your DNS zone file. If this is not the solution you are looking for, please search for your solution in the search bar above. Note: If you have any issues or questions whether CAA is supported with your setup, contact your DNS manager for further details. 

Prerequisites

Firstly, you must know which syntax type to use when configuring your DNS zone file depending on your DNS product type. Please refer to the table below: 

Guidelines

1. Open your domain's DNS zone file in a notepad. Note: You can find your DNS records on the machine where your domain is registered. 
2. Configure the file to include your desired CA(s) in your DNS CAA record. You can check the table above for your reference. Note: You can add more than one CA in a DNS CAA record, as adding only one CA will limit issuance of SSL/TLS certificates on that domain to just that CA. 
3. Save your zone file and close the notepad. 

References

1. Ballot 187 - Make CAA Checking Mandatory
2. DNS Certification Authority Authorization (CAA) Resource Code
3. Handling of Unknown DNS Resource Record (RR) Types