How to add DS (DNSSEC) records for .co.za (ZA) Domains from the client Panel

• DNSSEC (Domain Name System Security Extensions) adds a layer of authentication to DNS lookups for your domain, helping protect against DNS spoofing and cache poisoning attacks.
• For .co.za domains, DNSSEC is managed by adding DS (Delegation Signer) records via the HostAfrica Client Panel.

• Log in to the Client Panel
  https://panel.hostafrica.com/dashboard

• In the left-hand sidebar, click Domains.

• Find the relevant domain in the Domain Management list and click Manage on the right-hand side of its row.

• On the domain's management page, select DNSSEC from the left-hand menu
  (below Manage Nameservers, Manage Contacts, and Addons).

• Add New DS Record, complete the fields:
  Key Tag – numeric value, range 0–65535 (required)
  Algorithm – select from dropdown
  (default: 8 - RSA/SHA-256)
  Digest Type – select from dropdown
  (default: 2 - SHA-256)
  Digest – hexadecimal characters only (required)

• Click Add record to save.
  
  Any existing DS records for the domain are listed under Current DS Records at the top of the same page.
  If none have been added yet, this table will show
  "No DS Records."

DNSSEC is managed separately from your DNS records. You'll find it under its own DNSSEC menu item in the Client Panel — not under general DNS management.

Before adding a DS record, get the DS record values (Key Tag, Algorithm, Digest Type, and Digest) from your DNS provider or wherever your domain is signed. These values must be generated on that end — they can't be created for you.

Both sides need to match. If DNSSEC is turned on at the domain registry level but the matching DS record isn't added in your Client Panel (or the reverse), your domain may stop resolving. If you're having resolution issues, this mismatch is one of the first things to check.

To remove DNSSEC, go to the Current DS Records table and delete the DS record(s) listed there. The option to remove appears next to each record once one has been added.