ERROR: 216 No visible DNSKEY found signing the DNSKEY RR obtained in response

[phonon112358]

Thank you for your replies!

@fiwswe

But in the same area where you changed the NS records (the delegation of the domain to deSEC name servers) you should find a way to enter either the DS records, or the KSK/CSK DNSKEY from which the DS records can be generated. If not, contact their support.

That’s not the issue I guess…

I have entered the 257 KSK key already in the webinterface of do.de , however there is that error message.

It is a bit strange since the 256 CSK key from 1984.hosting was working fine on do.de… However, 1984.hosting doesn’t offer the options I need, whereas desec.io does!

@fiwswe

Your real problem seems to be that the de. zone does not contain the DS records for your domain

But there is no way to enter a DS key on do.de …

@nils

For comparison, nils-wisiol.de is a domain with DNSSEC configuration same as on aaron-schaal.de, but passes the NAST test

Thanks for reproducing my issue! Very strange that the NAST check works on your domain, but not on mine…!

I will write to the do.de support and ask them to assist me …