Skip to main content

Domain configuration and management

Updated

Notice

In DigiCert®​​ DNS, managed domains (as seen in the UI) are referred to as primary domains in the documentation. Both terms refer to the same concept.

Summary

A comprehensive feature that enables users to configure, customize, and manage both primary and secondary domains with advanced settings control.

Description

DigiCert®​​ DNS provides a centralized interface for configuring and customizing primary and secondary domains to ensure optimal performance and reliability. By streamlining domain management, users can reduce administrative complexity, enhance operational efficiency, and improve domain resilience.

Related functions

Primary domain configuration

Notice

In DigiCert®​​ DNS, managed domains (as seen in the UI) are referred to as primary domains in the documentation. Both terms refer to the same concept.

Overview

This guide provides detailed instructions for primary domain configuration, covering both targeted and comprehensive actions.

Targeted actions include:

Comprehensive actions include:

Benefits

Configuring primary domains enhances DNS management by optimizing resolution times, strengthening security, and ensuring compliance with industry standards. With DigiCert®​​ DNS, users benefit from a unified approach to issue detection and troubleshooting, reducing downtime and improving reliability. Automated audit trails provide full visibility into configuration changes, simplifying compliance and governance. Centralized management standardizes domain settings across environments, minimizing administrative effort while maximizing control, efficiency, and consistency.

Procedures

Clear multiple primary domains

Notice

This procedure clears two primary domains (domain1 and domain2) created in an earlier procedure.

To test this function, call this API endpoint: POST /domains/primary/bulk/delete

  1. Sign in to your DigiCert®​​ DNS account.
  2. From the landing page, go to the left sidebar and select DNS > Domains.
  3. In the MANAGED DNS tab, select the checkboxes of the domains you want to clear (for example, domain1 and domain2).
  4. Go to Actions > Delete Domain.
  5. In the Confirm Deletion dialog:
    1. Enter the confirmation code.

    2. Select Confirm.

      A message appears confirming the successful clearance of the domains.

Create a new primary domain

Notice

This procedure creates two primary domains: domain1 and domain2. These domains are referenced in other procedures.

To test this function, call this API endpoint: POST /domains/primary

  1. Sign in to your DigiCert®​​ DNS account.
  2. From the landing page, go to the left sidebar and select DNS > Domains.
  3. Select the Add Domains button.
  4. In the Add Domains dialog:
    1. Ensure the Managed DNS checkbox is selected.
    2. In the Domain Names field, enter one or more domain names (for example, domain1 and domain2).
    3. (Optional) Configure additional settings as needed:
      1. Global Traffic Director: Enable or disable GTD capabilities.
      2. SOA Record: Select a user-defined SOA record, or keep the system default.
      3. Nameserver Set: Select a user-defined nameserver set, or keep the system default.
      4. Valimail Monitor: Enable or disable DMARC monitoring.
      5. Managed IP Set: Select a user-defined IP set, or leave it as 'None' (system default).
      6. TSIG Key: Select a user-defined TSIG key, or leave it as 'None' (system default).
      7. Template: Select a user-defined template, or leave it as 'None' (system default).
      8. Resource Groups: Select a user-defined resource group, or keep the system default.

    4. Select Save to finish.

      A message appears confirming the successful creation of the domain.

      Important

      If you encounter issues, refer to the Troubleshooting guide.

Delete a specific primary domain

Notice

This procedure deletes a specific primary domain (domain1) created in an earlier procedure. You can follow either Path 1 or Path 2 to complete the deletion.

To test this function, call this API endpoint: DELETE /domains/primary/{domainId}

Path 1

  1. Sign in to your DigiCert®​​ DNS account.
  2. From the landing page, go to the left sidebar and select DNS > Domains.
  3. In the MANAGED DNS tab, locate the domain you want to delete (for example, domain1).
  4. From the overflow menu (three vertical dots) at the end of the domain's row, select Delete Domain.
  5. In the Confirm Deletion dialog:
    1. Enter the confirmation code.

    2. Select Confirm.

      A message appears confirming the successful deletion of the domain.

Path 2

  1. Sign in to your DigiCert®​​ DNS account.
  2. From the landing page, go to the left sidebar and select DNS > Domains.

  3. In the MANAGED DNS tab, select the checkbox of the domain you want to delete (for example, domain1).

    Tip

    You can select multiple checkboxes to delete several domains at once.

  4. Go to Actions > Delete Domain.
  5. In the Confirm Deletion dialog:
    1. Enter the confirmation code.

    2. Select Confirm.

      A message appears confirming the successful deletion of the domain.

List all available GTD locations

Notice

The current version of DigiCert®​​ DNS supports 8 GTD regions (Africa, Asia Pacific, Default, Europe, NA East, NA West, Oceania, and South America). However, these regions are only displayed on the front-end when a domain is GTD-enabled. To view all available GTD locations regardless of domain status, use the following endpoint:

GET /gtdlocations

For help configuring your testing environment, refer to the API guide.

List all available primary domains

Notice

This procedure displays all primary domains created by the user.

To test this function, call this API endpoint: GET /domains/primary

  1. Sign in to your DigiCert®​​ DNS account.
  2. From the landing page, go to the left sidebar and select DNS > Domains.

  3. Select the MANAGED DNS tab.

    The table displays all the primary domains associated with the account.

    Tip

    Use Columns and Filters to customize your view of the results.

List the delegated nameservers of a specific primary domain

Notice

This procedure displays the delegated nameservers of a specific primary domain (domain1) created in an earlier procedure. Follow Path 1 if there are only a few results to review. Follow Path 2 if you prefer to filter results quickly.

To test this function, call this API endpoint: GET /domains/primary/{domainId}/delegatednameservers

Path 1

  1. Sign in to your DigiCert®​​ DNS account.
  2. From the landing page, go to the left sidebar and select DNS > Domains.

  3. Select the MANAGED DNS tab.

    The table displays all the primary domains associated with the account.

  4. Select the name of the primary domain (for example, domain1) whose delegated nameservers you want to view.

  5. Select the NAMESERVERS tab.

    The Delegated Nameservers table displays all the nameservers delegated to the primary domain.

Path 2

  1. Sign in to your DigiCert®​​ DNS account.
  2. From the landing page, go to the left sidebar and select DNS > Domains.

  3. Select the MANAGED DNS tab.

    The table displays all the primary domains associated with the account.

  4. Select Filters at the top of the results table to locate the specific primary domain quickly.

    Tip

    In this example, the name of the primary domain is known, so the following filter was applied:

    1. Under Column, select Name.
    2. Under Operator, select contains.

    3. Under Value, enter the primary domain's name (domain1).

      If no results appear, double-check the Filters selections and input values.

  5. Select the name of the primary domain (for example, domain1) whose delegated nameservers you want to view.

  6. Select the NAMESERVERS tab.

    The Delegated Nameservers table displays all the nameservers delegated to the primary domain.

List the nameservers of a specific primary domain

Notice

This procedure displays the nameservers of a specific primary domain (domain1) created in an earlier procedure. Follow Path 1 if there are only a few results to review. Follow Path 2 if you prefer to filter results quickly.

To test this function, call this API endpoint: GET /domains/primary/{domainId}/nameservers

Path 1

  1. Sign in to your DigiCert®​​ DNS account.
  2. From the landing page, go to the left sidebar and select DNS > Domains.

  3. Select the MANAGED DNS tab.

    The table displays all the primary domains associated with the account.

  4. Select the name of the primary domain (for example, domain1) whose nameservers you want to view.

  5. Select the NAMESERVERS tab.

    The Nameservers table displays all the nameservers assigned to the primary domain.

Path 2

  1. Sign in to your DigiCert®​​ DNS account.
  2. From the landing page, go to the left sidebar and select DNS > Domains.

  3. Select the MANAGED DNS tab.

    The table displays all the primary domains associated with the account.

  4. Select Filters at the top of the results table to locate the specific primary domain quickly.

    Tip

    In this example, the name of the primary domain is known, so the following filter was applied:

    1. Under Column, select Name.
    2. Under Operator, select contains.

    3. Under Value, enter the primary domain's name (domain1).

      If no results appear, double-check the Filters selections and input values.

  5. Select the name of the primary domain (for example, domain1) whose nameservers you want to view.

  6. Select the NAMESERVERS tab.

    The Nameservers table displays all the nameservers assigned to the primary domain.

List the nameservers of all primary domains

Notice

The current version of DigiCert®​​ DNS does not include a dedicated front-end tab for viewing the nameservers for all primary domains. To access this information, use the following endpoint:

GET /domains/primary/nameservers

For help configuring your testing environment, refer to the API guide.

Provision multiple primary domains in bulk

Notice

The procedure for creating one or more primary domains manually can be found here. To automate this process and provision domains in bulk, use the following API endpoint:

POST /domains/primary/bulk

For help configuring your testing environment, refer to the API guide.

Return the details of a specific GTD location

Notice

The current version of DigiCert®​​ DNS does not include a dedicated front-end tab for viewing the details of a specific GTD location. To access this information, use the following endpoint:

GET /gtdlocations/{gtdLocationId}

For help configuring your testing environment, refer to the API guide.

Return the details of a specific nameserver

Notice

The current version of DigiCert®​​ DNS does not include a dedicated front-end tab for viewing the details of a specific nameserver. To access this information, use the following endpoint:

GET/domains/primary/nameservers/{id}

For help configuring your testing environment, refer to the API guide.

Return the details of a specific primary domain

Notice

This procedure displays the details of a specific primary domain (domain1) created in an earlier procedure. Follow Path 1 if there are only a few results to review. Follow Path 2 if you prefer to filter results quickly.

To test this function, call this API endpoint: GET /domains/primary/{domainId}

Path 1

  1. Sign in to your DigiCert®​​ DNS account.
  2. From the landing page, go to the left sidebar and select DNS > Domains.

  3. Select the MANAGED DNS tab.

    The table displays all the primary domains associated with the account.

  4. Select the name of the domain (for example, domain1) whose details you want to view.
Path 2

  1. Sign in to your DigiCert®​​ DNS account.
  2. From the landing page, go to the left sidebar and select DNS > Domains.

  3. Select the MANAGED DNS tab.

    The table displays all the primary domains associated with the account.

  4. Select Filters at the top of the results table to locate the specific domain quickly.

    Tip

    In this example, the name of the domain is known, so the following filter was applied:

    1. Under Column, select Domain.
    2. Under Operator, select contains.

    3. Under Value, enter the domain's name (domain1).

      If no results appear, double-check the Filters selections and input values.

  5. Select the name of the domain (for example, domain1) whose details you want to view.

Update the settings of a specific primary domain

Notice

This procedure updates the settings of a specific primary domain (domain1) created in an earlier procedure.

To test this function, call this API endpoint: PUT /domains/primary/{domainId}/settings

  1. Sign in to your DigiCert®​​ DNS account.
  2. From the landing page, go to the left sidebar and select DNS > Domains.

  3. Select the MANAGED DNS tab.

    The table displays all the primary domains associated with the account.

  4. Select the name of the domain (for example, domain1) whose settings you want to update.
  5. Select the SETTINGS tab.
  6. Update the following settings as needed:
    1. Status: Activate or deactivate the domain.
    2. Template: Select a user-defined template, or leave it as 'None' (system default).
    3. SOA Record: Select a user-defined SOA record, or keep the system default.
    4. Nameserver Set: Select a user-defined nameserver set, or keep the system default.
    5. Global Traffic Director (GTD): Enable or disable GTD capabilities.
    6. Valimail Monitor: Enable or disable DMARC monitoring.
    7. Zone Transfer (AXFR ACL):
      1. Managed IP Set: Select a user-defined IP set, or leave it as 'None' (system default).
      2. TSIG Key: Select a user-defined TSIG key, or leave it as 'None' (system default).
    8. Resource Groups: Select a user-defined resource group, or keep the system default.
    9. Notification Contact List: Select user-defined user groups, or leave it as 'None' (system default).

  7. Select Save to finish.

    A message appears confirming the successful update of the domain's settings.

Secondary domain configuration

Overview

This guide provides step-by-step instructions for secondary domain configuration, covering both targeted and comprehensive actions.

Targeted actions include:

Comprehensive actions include:

Benefits

Configuring secondary domains improves availability, reduces resolution times, and reinforces redundancy. The DigiCert®​​ DNS platform automates synchronization with primary domains, strengthening disaster recovery and overall security. Centralized control enables users to efficiently apply updates, minimize downtime, and maintain seamless business continuity.

Procedures

Clear multiple secondary domains

Notice

This procedure clears two secondary domains (domain1 and domain2) created in an earlier procedure.

To test this function, call this API endpoint: POST /domains/secondary/bulk/delete

  1. Sign in to your DigiCert®​​ DNS account.
  2. From the landing page, go to the left sidebar and select DNS > Domains.
  3. In the SECONDARY DNS tab, select the checkboxes of the domains you want to clear (for example, domain1 and domain2).
  4. Go to Actions > Delete Domain.
  5. In the Confirm Deletion dialog:
    1. Enter the confirmation code.

    2. Select Confirm.

      A message appears confirming the successful clearance of the domains.

Create a new secondary domain

Notice

This procedure creates two secondary domains: domain1 and domain2. These domains are referenced in other procedures.

To test this function, call this API endpoint: POST /domains/secondary

  1. Sign in to your DigiCert®​​ DNS account.
  2. From the landing page, go to the left sidebar and select DNS > Domains.
  3. Select the Add Domains button.
  4. In the Add Domains dialog:
    1. Ensure the Secondary DNS checkbox is selected.
    2. In the Domain Names field, enter one or more domain names (for example, domain1 and domain2).
    3. (Optional) Configure additional settings as needed:
      1. Secondary IP Set: Select a user-defined IP set, or keep the system default.
      2. TSIG Key: Select a user-defined TSIG key, or leave it as 'None' (system default).
      3. Resource Groups: Select a user-defined resource group, or keep the system default.

    4. Select Save to finish.

      A message appears confirming the successful creation of the domain.

      Important

      If you encounter issues, refer to the Troubleshooting guide.

Delete a specific secondary domain

Notice

This procedure deletes a specific secondary domain (domain1) created in an earlier procedure. You can follow either Path 1 or Path 2 to complete the deletion.

To test this function, call this API endpoint: DELETE /domains/secondary/{domainId}

Path 1

  1. Sign in to your DigiCert®​​ DNS account.
  2. From the landing page, go to the left sidebar and select DNS > Domains.
  3. In the SECONDARY DNS tab, locate the domain you want to delete (for example, domain1).
  4. From the overflow menu (three vertical dots) at the end of the domain's row, select Delete Domain.
  5. In the Confirm Deletion dialog:
    1. Enter the confirmation code.

    2. Select Confirm.

      A message appears confirming the successful deletion of the domain.

Path 2

  1. Sign in to your DigiCert®​​ DNS account.
  2. From the landing page, go to the left sidebar and select DNS > Domains.

  3. In the SECONDARY DNS tab, select the checkbox of the domain you want to delete (for example, domain1).

    Tip

    You can select multiple checkboxes to delete several domains at once.

  4. Go to Actions > Delete Domain.
  5. In the Confirm Deletion dialog:
  6. Enter the confirmation code.

  7. Select Confirm.

    A message appears confirming the successful deletion of the domain.

List all available secondary domains

Notice

This procedure displays all secondary domains created by the user.

To test this function, call this API endpoint: GET /domains/secondary

  1. Sign in to your DigiCert®​​ DNS account.
  2. From the landing page, go to the left sidebar and select DNS > Domains.

  3. Select the SECONDARY DNS tab.

    The table displays all the secondary domains associated with the account.

    Tip

    Use Columns and Filters to customize your view of the results.

List the nameservers of all secondary domains

Notice

The current version of DigiCert®​​ DNS does not include a dedicated front-end tab for viewing the nameservers for all secondary domains. To access this information, use the following endpoint:

GET /domains/secondary/nameservers

For help configuring your testing environment, refer to the API guide.

Provision multiple secondary domains in bulk

Notice

The procedure for creating one or more secondary domains manually can be found here. To automate this process and provision domains in bulk, use the following API endpoint:

POST /domains/secondary/bulk

For help configuring your testing environment, refer to the API guide.

List the configured nameservers of a specific secondary domain

Notice

This procedure displays the configured nameservers of a specific secondary domain (domain1) created in an earlier procedure. Follow Path 1 if there are only a few results to review. Follow Path 2 if you prefer to filter results quickly.

To test this function, call this API endpoint: GET /domains/secondary/{domainId}/configurednameservers

Path 1
  1. Sign in to your DigiCert®​​ DNS account.
  2. From the landing page, go to the left sidebar and select DNS > Domains.

  3. Select the SECONDARY DNS tab.

    The table displays all the secondary domains associated with the account.

  4. Select the name of the secondary domain (for example, domain1) whose configured nameservers you want to view.

  5. Select the NAMESERVERS tab.

    The Configured Nameservers table displays all the nameservers configured for the secondary domain.

Path 2
  1. Sign in to your DigiCert®​​ DNS account.
  2. From the landing page, go to the left sidebar and select DNS > Domains.

  3. Select the SECONDARY DNS tab.

    The table displays all the secondary domains associated with the account.

  4. Select Filters at the top of the results table to locate the specific secondary domain quickly.

    Tip

    In this example, the name of the secondary domain is known, so the following filter was applied:

    1. Under Column, select Name.
    2. Under Operator, select contains.

    3. Under Value, enter the secondary domain's name (domain1).

      If no results appear, double-check the Filters selections and input values.

  5. Select the name of the secondary domain (for example, domain1) whose configured nameservers you want to view.

  6. Select the NAMESERVERS tab.

    The Configured Nameservers table displays all the nameservers configured for the secondary domain.

List the delegated nameservers of a specific secondary domain

Notice

This procedure displays the delegated nameservers of a specific secondary domain (domain1) created in an earlier procedure. Follow Path 1 if there are only a few results to review. Follow Path 2 if you prefer to filter results quickly.

To test this function, call this API endpoint: GET /domains/secondary/{domainId}/delegatednameservers

Path 1

  1. Sign in to your DigiCert®​​ DNS account.
  2. From the landing page, go to the left sidebar and select DNS > Domains.

  3. Select the SECONDARY DNS tab.

    The table displays all the secondary domains associated with the account.

  4. Select the name of the secondary domain (for example, domain1) whose delegated nameservers you want to view.

  5. Select the NAMESERVERS tab.

    The Delegated Nameservers table displays all the nameservers delegated to the secondary domain.

Path 2

  1. Sign in to your DigiCert®​​ DNS account.
  2. From the landing page, go to the left sidebar and select DNS > Domains.

  3. Select the SECONDARY DNS tab.

    The table displays all the secondary domains associated with the account.

  4. Select Filters at the top of the results table to locate the specific secondary domain quickly.

    Tip

    In this example, the name of the secondary domain is known, so the following filter was applied:

    1. Under Column, select Name.
    2. Under Operator, select contains.

    3. Under Value, enter the secondary domain's name (domain1).

      If no results appear, double-check the Filters selections and input values.

  5. Select the name of the secondary domain (for example, domain1) whose delegated nameservers you want to view.

  6. Select the NAMESERVERS tab.

    The Delegated Nameservers table displays all the nameservers delegated to the secondary domain.

Return the details of a specific nameserver

Notice

The current version of DigiCert®​​ DNS does not include a dedicated front-end tab for viewing the details of a specific nameserver. To access this information, use the following endpoint:

GET /domains/secondary/nameservers/{id}

For help configuring your testing environment, refer to the API guide.

Return the details of a specific secondary domain

Notice

This procedure displays the details of a specific secondary domain (domain1) created in an earlier procedure. Follow Path 1 if there are only a few results to review. Follow Path 2 if you prefer to filter results quickly.

To test this function, call this API endpoint: GET /domains/secondary/{domainId}

Path 1

  1. Sign in to your DigiCert®​​ DNS account.
  2. From the landing page, go to the left sidebar and select DNS > Domains.

  3. Select the SECONDARY DNS tab.

    The table displays all the secondary domains associated with the account.

  4. Select the name of the domain (for example, domain1) whose details you want to view.
Path 2

  1. Sign in to your DigiCert®​​ DNS account.
  2. From the landing page, go to the left sidebar and select DNS > Domains.

  3. Select the SECONDARY DNS tab.

    The table displays all the secondary domains associated with the account.

  4. Select Filters at the top of the results table to locate the specific domain quickly.

    Tip

    In this example, the name of the domain is known, so the following filter was applied:

    1. Under Column, select Domain.
    2. Under Operator, select contains.

    3. Under Value, enter the domain's name (domain1).

      If no results appear, double-check the Filters selections and input values.

  5. Select the name of the domain (for example, domain1) whose details you want to view.

Update the settings of a specific secondary domain

Notice

This procedure updates the settings of a specific secondary domain (domain1) created in an earlier procedure.

To test this function, call this API endpoint: PUT /domains/secondary/{domainId}/settings

  1. Sign in to your DigiCert®​​ DNS account.
  2. From the landing page, go to the left sidebar and select DNS > Domains.

  3. Select the SECONDARY DNS tab.

    The table displays all secondary domains associated with the account.

  4. Select the name of the domain (for example, domain1) whose settings you want to update.
  5. Select the SETTINGS tab.
  6. Update the following settings as needed:
    1. Secondary IP Set:
      1. Secondary IP Set: Select a user-defined IP set, or keep the system default.
      2. TSIG Key: Select a user-defined TSIG key, or leave it as 'None' (system default).
    2. Resource Groups: Select a user-defined resource group, or keep the system default.
    3. Notification Contact List: Select a user-defined user group, or leave it as 'None' (system default).

  7. Select Save to finish.

    A message appears confirming the successful update of the domain's settings.

Primary domain health monitoring

Notice

In DigiCert®​​ DNS, managed domains (as seen in the UI) are referred to as primary domains in the documentation. Both terms refer to the same concept.

Overview

This guide provides step-by-step instructions for primary domain health monitoring, covering a series of targeted actions, including:

Benefits

Monitoring the health of primary domains is essential for maintaining authoritative DNS integrity, ensuring successful zone transfers, and supporting downstream synchronization with secondary systems. The DigiCert®​​ DNS platform provides comprehensive visibility into overall domain health, nameserver availability, AXFR and zone transfer status, and related IP set and notification activity. With centralized monitoring and real-time insights, users can quickly identify misconfigurations, transfer failures, or service disruptions—enabling faster remediation, improved DNS resilience, and more reliable domain operations.

Procedures

Return the AXFR health status of a specific primary domain

Notice

This procedure displays the AXFR health status of a specific primary domain (domain1) created in an earlier procedure. To access the same data via the back-end, use the following API endpoint:

GET /health/primary/{domainId}/health/axfr

For help configuring your testing environment, refer to the API guide.

  1. Sign in to your DigiCert®​​ DNS account.
  2. From the landing page, go to the left sidebar and select DNS > Domains.

  3. Select the MANAGED DNS tab.

    The table displays all the primary domains associated with the account.

  4. Select the name of the primary domain (for example, domain1) whose AXFR health status you want to view.
  5. Select the HEALTH tab.
  6. Locate the AXFR Service Logs card to view the domain’s AXFR health status.

Return the health status of a specific primary domain

Notice

This procedure displays the overall health status of a specific primary domain (domain1) created in an earlier procedure. To access the same data via the back-end, use the following API endpoint:

GET /health/primary/{domainId}/health

For help configuring your testing environment, refer to the API guide.

  1. Sign in to your DigiCert®​​ DNS account.
  2. From the landing page, go to the left sidebar and select DNS > Domains.

  3. Select the MANAGED DNS tab.

    The table displays all the primary domains associated with the account.

  4. Select the name of the primary domain (for example, domain1) whose health status you want to view.
  5. Select the HEALTH tab.

  6. Locate the HEALTH CHECK card to view the domain’s overall health status.

    The overall health status is determined by the results of the following health checks: Serial Number Match, Nameserver Delegation, and Zone Transfer Availability.

Return the IP set–related health notifications of a specific primary domain

Notice

This procedure displays the IP set–related health notifications of a specific primary domain (domain1) created in an earlier procedure. To access the same data via the back-end, use the following API endpoint:

GET /health/primary/{domainId}/health/ipsetnotifications

For help configuring your testing environment, refer to the API guide.

  1. Sign in to your DigiCert®​​ DNS account.
  2. From the landing page, go to the left sidebar and select DNS > Domains.

  3. Select the MANAGED DNS tab.

    The table displays all the primary domains associated with the account.

  4. Select the name of the primary domain (for example, domain1) whose IP set–related health notifications you want to view.
  5. Select the HEALTH tab.
  6. Locate the Notifications > IP card to view the domain’s IP set–related health notifications.

Return the nameserver health status of a specific primary domain

Notice

This procedure displays the nameserver health status of a specific primary domain (domain1) created in an earlier procedure. To access the same data via the back-end, use the following API endpoint:

GET /health/primary/{domainId}/health/nameserver

For help configuring your testing environment, refer to the API guide.

  1. Sign in to your DigiCert®​​ DNS account.
  2. From the landing page, go to the left sidebar and select DNS > Domains.

  3. Select the MANAGED DNS tab.

    The table displays all the primary domains associated with the account.

  4. Select the name of the primary domain (for example, domain1) whose nameserver health status you want to view.
  5. Select the HEALTH tab.
  6. Locate the Nameserver card to view the domain’s nameserver health status.

Return the notification service health status of a specific primary domain

Notice

This procedure displays the notification service health status of a specific primary domain (domain1) created in an earlier procedure. To access the same data via the back-end, use the following API endpoint:

GET /health/primary/{domainId}/health/notificationservice

For help configuring your testing environment, refer to the API guide.

  1. Sign in to your DigiCert®​​ DNS account.
  2. From the landing page, go to the left sidebar and select DNS > Domains.

  3. Select the MANAGED DNS tab.

    The table displays all the primary domains associated with the account.

  4. Select the name of the primary domain (for example, domain1) whose notification service health status you want to view.
  5. Select the HEALTH tab.
  6. Locate the Notification > Notification Service card to view the domain’s notification service health status.

Return the recent health-related notifications of a specific primary domain

Notice

This procedure displays the recent health-related notifications of a specific primary domain (domain1) created in an earlier procedure. To access the same data via the back-end, use the following API endpoint:

GET /health/primary/{domainId}/health/recentnotifications

For help configuring your testing environment, refer to the API guide.

  1. Sign in to your DigiCert®​​ DNS account.
  2. From the landing page, go to the left sidebar and select DNS > Domains.

  3. Select the MANAGED DNS tab.

    The table displays all the primary domains associated with the account.

  4. Select the name of the primary domain (for example, domain1) whose recent health-related notifications you want to view.
  5. Select the HEALTH tab.
  6. Locate the AXFR Service Logs > Notification Service card to view the domain’s recent health-related notifications.

Return the zone transfer check status of a specific primary domain

Notice

This procedure displays the zone transfer check status of a specific secondary domain (domain1) created in an earlier procedure. To access the same data via the back-end, use the following API endpoint:

GET /health/primary/{domainId}/health/zonetransfercheck

For help configuring your testing environment, refer to the API guide.

  1. Sign in to your DigiCert®​​ DNS account.
  2. From the landing page, go to the left sidebar and select DNS > Domains.

  3. Select the MANAGED DNS tab.

    The table displays all the primary domains associated with the account.

  4. Select the name of the primary domain (for example, domain1) whose zone transfer check status you want to view.
  5. Select the HEALTH tab.
  6. Locate the Zone Transfer card to view the domain’s zone transfer check status.

Secondary domain health monitoring

Overview

This guide provides step-by-step instructions for secondary domain health monitoring, covering a series of targeted actions, including:

Benefits

Monitoring the health of secondary domains is crucial for ensuring seamless failover, maximizing infrastructure reliability, and maintaining compliance with industry standards. The DigiCert®​​ DNS platform enhances visibility with real-time health metrics, event-driven notifications, and notification service monitoring to ensure alerts are generated and delivered as expected. With centralized insight into synchronization status, IP set activity, and recent domain events, users can proactively detect and resolve issues faster—minimizing disruptions and maintaining operational continuity.

Procedures

Return the AXFR health status of a specific secondary domain

Notice

This procedure displays the AXFR health status of a specific secondary domain (domain1) created in an earlier procedure. To access the same data via the back-end, use the following API endpoint:

GET /health/secondary/{domainId}/health/axfr

For help configuring your testing environment, refer to the API guide.

  1. Sign in to your DigiCert®​​ DNS account.
  2. From the landing page, go to the left sidebar and select DNS > Domains.

  3. Select the SECONDARY DNS tab.

    The table displays all the secondary domains associated with the account.

  4. Select the name of the secondary domain (for example, domain1) whose AXFR health status you want to view.
  5. Select the HEALTH tab.
  6. Locate the AXFR Service Logs card to view the domain’s AXFR health status.

Return the health status of a specific secondary domain

Notice

This procedure displays the overall health status of a specific secondary domain (domain1) created in an earlier procedure. To access the same data via the back-end, use the following API endpoint:

GET /health/secondary/{domainId}/health

For help configuring your testing environment, refer to the API guide.

  1. Sign in to your DigiCert®​​ DNS account.
  2. From the landing page, go to the left sidebar and select DNS > Domains.

  3. Select the SECONDARY DNS tab.

    The table displays all the secondary domains associated with the account.

  4. Select the name of the secondary domain (for example, domain1) whose health status you want to view.
  5. Select the HEALTH tab.

  6. Locate the HEALTH CHECK card to view the domain’s overall health status.

    The overall health status is determined by the results of the following health checks: Serial Number Match, Nameserver Delegation, and Nameserver Reachability.

Return the IP set–related health notifications of a specific secondary domain

Notice

This procedure displays the IP set–related health notifications of a specific secondary domain (domain1) created in an earlier procedure. To access the same data via the back-end, use the following API endpoint:

GET /health/secondary/{domainId}/health/ipsetnotifications

For help configuring your testing environment, refer to the API guide.

  1. Sign in to your DigiCert®​​ DNS account.
  2. From the landing page, go to the left sidebar and select DNS > Domains.

  3. Select the SECONDARY DNS tab.

    The table displays all the secondary domains associated with the account.

  4. Select the name of the secondary domain (for example, domain1) whose IP set–related health notifications you want to view.
  5. Select the HEALTH tab.
  6. Locate the Notifications > IP card to view the domain’s IP set–related health notifications.

Return the nameserver health status of a specific secondary domain

Notice

This procedure displays the nameserver health status of a specific secondary domain (domain1) created in an earlier procedure. To access the same data via the back-end, use the following API endpoint:

GET /health/secondary/{domainId}/health/nameserver

For help configuring your testing environment, refer to the API guide.

  1. Sign in to your DigiCert®​​ DNS account.
  2. From the landing page, go to the left sidebar and select DNS > Domains.

  3. Select the SECONDARY DNS tab.

    The table displays all the secondary domains associated with the account.

  4. Select the name of the secondary domain (for example, domain1) whose nameserver health status you want to view.
  5. Select the HEALTH tab.
  6. Locate the Nameserver card to view the domain’s nameserver health status.

Return the notification service health status of a specific secondary domain

Notice

This procedure displays the notification service health status of a specific secondary domain (domain1) created in an earlier procedure. To access the same data via the back-end, use the following API endpoint:

GET /health/secondary/{domainId}/health/notificationservice

For help configuring your testing environment, refer to the API guide.

  1. Sign in to your DigiCert®​​ DNS account.
  2. From the landing page, go to the left sidebar and select DNS > Domains.

  3. Select the SECONDARY DNS tab.

    The table displays all the secondary domains associated with the account.

  4. Select the name of the secondary domain (for example, domain1) whose notification service health status you want to view.
  5. Select the HEALTH tab.
  6. Locate the Notification > Notification Service card to view the domain’s notification service health status.

Return the recent health-related notifications of a specific secondary domain

Notice

This procedure displays the recent health-related notifications of a specific secondary domain (domain1) created in an earlier procedure. To access the same data via the back-end, use the following API endpoint:

GET /health/secondary/{domainId}/health/recentnotifications

For help configuring your testing environment, refer to the API guide.

  1. Sign in to your DigiCert®​​ DNS account.
  2. From the landing page, go to the left sidebar and select DNS > Domains.

  3. Select the SECONDARY DNS tab.

    The table displays all the secondary domains associated with the account.

  4. Select the name of the secondary domain (for example, domain1) whose recent health-related notifications you want to view.
  5. Select the HEALTH tab.
  6. Locate the AXFR Service Logs > Notification Service card to view the domain’s recent health-related notifications.

Return the zone transfer check status of a specific secondary domain

Notice

This procedure displays the zone transfer check status of a specific secondary domain (domain1) created in an earlier procedure. To access the same data via the back-end, use the following API endpoint:

GET /health/secondary/{domainId}/health/zonetransfercheck

For help configuring your testing environment, refer to the API guide.

  1. Sign in to your DigiCert®​​ DNS account.
  2. From the landing page, go to the left sidebar and select DNS > Domains.

  3. Select the SECONDARY DNS tab.

    The table displays all the secondary domains associated with the account.

  4. Select the name of the secondary domain (for example, domain1) whose zone transfer check status you want to view.
  5. Select the HEALTH tab.
  6. Locate the Zone Transfer card to view the domain’s zone transfer check status.