title: Disabling DNSSEC Protection For a Domain created at: Tue Oct 22 2024 18:04:38 GMT+0000 (Coordinated Universal Time) updated at: Tue Oct 22 2024 18:11:43 GMT+0000 (Coordinated Universal Time) --- # Disabling DNSSEC Protection For a Domain If the keys are compromised, you need to sign the domain zone with new keys. To do so, disable DNSSEC protection: 1. Delete all the DS-records from the parent domain zone and wait for several hours; 2. Delete the domain signature in \*\*Domains **→** Domain names \*\*→\*\* **select a domain** **→** Edit→ \*\*select the \*\*Delete record \*\*checkbox. Once completed, the system will un-sign all the domain names and delete their keys.