# Specific ccTLDs: Nameservers

### .DE-Domains

<span style="font-family: Arial,Helvetica;">In case you want to **use your own/external name servers** for your .**DE-domains** instead of the standard name servers from Joker.com, you have to make sure that these name servers are compliant with the [requirements set by the DENIC](https://www.denic.de/fileadmin/public/documentation/DENIC-23p.pdf "DENIC DNS requirements").</span><span style="font-family: Arial,Helvetica;"> </span>

<span style="font-family: Arial,Helvetica;">Requests to register or update **.de domains** are handled by a robot doing the following **checks on the registry side**:</span>

- are all name servers given in the request reachable?
- are they authoritative?
- do their answers contain the "authoritative answer" (AA) bit and do they know about the other authoritative name servers?
- are all authoritative nameservers given in the request?
- are values in the SOA record*s* in the ranges required by the DENIC?
- are the SOA values identical for all name servers?
- do at least two of the three name servers differ in the first three bytes of the IP (v4) address?

Name Server: SOA Records

<span style="font-family: Arial,Helvetica;"> </span>

<span style="font-family: Arial,Helvetica;">SOA stands for "**Start of Authority**". </span>

<span style="font-family: Arial,Helvetica;">An [SOA record](https://en.wikipedia.org/wiki/SOA_Resource_Record "Wikipedia: SOA") is the part of a <abbr class="glossary" title="Domain Name Server">DNS</abbr> zone containing the email of the responsible person of the zone, and various synchronization parameters used by the different name servers of the zone. </span>

<span style="font-family: Arial,Helvetica;">Requests to register or update **.DE domains** must contain SOA values in the following ranges:</span>

<div align="left" id="bkmrk-soa-record-value-ser-1"><table border="1" class="align-center" style="border-collapse: collapse; width: 424px; height: 96px; border-width: 1px;"><tbody><tr><td style="border-width: 1px;">**<span style="font-family: arial,helvetica,sans-serif; font-size: small;">SOA-Record</span>**</td><td style="border-width: 1px;">**<span style="font-family: arial,helvetica,sans-serif; font-size: small;">Value</span>**</td></tr><tr><td class="align-left" style="border-width: 1px;"><span style="font-family: arial,helvetica,sans-serif; font-size: small;">serial recommended format</span></td><td class="align-left" style="border-width: 1px;"><span style="font-family: arial,helvetica,sans-serif; font-size: small;">YYYYMMDDnn</span></td></tr><tr><td class="align-left" style="border-width: 1px;"><span style="font-family: arial,helvetica,sans-serif; font-size: small;">refresh</span></td><td class="align-left" style="border-width: 1px;"><span style="font-family: arial,helvetica,sans-serif; font-size: small;">\[10000 ... 86400\]</span></td></tr><tr><td class="align-left" style="border-width: 1px;"><span style="font-family: arial,helvetica,sans-serif; font-size: small;">retry</span></td><td class="align-left" style="border-width: 1px;"><span style="font-family: arial,helvetica,sans-serif; font-size: small;">\[1800 ... 28800\]</span></td></tr><tr><td class="align-left" style="border-width: 1px;"><span style="font-family: arial,helvetica,sans-serif; font-size: small;">expire</span></td><td class="align-left" style="border-width: 1px;"><span style="font-family: arial,helvetica,sans-serif; font-size: small;">\[604800 ... 3600000\]</span></td></tr><tr><td class="align-left" style="border-width: 1px;"><span style="font-family: arial,helvetica,sans-serif; font-size: small;">ttl</span><span style="font-family: arial,helvetica,sans-serif; font-size: small;"> </span>

</td><td class="align-left" style="border-width: 1px;"><span style="font-family: arial,helvetica,sans-serif; font-size: small;">\[180 ... 345600\]</span></td></tr></tbody></table>

</div>If you are not sure, if your nameservers are compliant with DENIC requirements, or get an error related to nameservice, please check your nameservers at [https://nast.denic.de/](https://nast.denic.de/)


### .DK-Domains

##### Nameserver change

The process of changing the nameserver for .dk domains is specifically regulated by DK Hostmaster. To modify the nameserver associated with a .dk domain, it is mandatory to go through DK Hostmaster's designated platform at:

[https://self-service.dk-hostmaster.dk/domain/change\_name\_server](https://self-service.dk-hostmaster.dk/domain/change_name_server)

When you navigate to the aforementioned website, you will find a user-friendly interface designed to assist domain owners in updating their nameserver information. This process ensures that only authorized individuals with the appropriate access can make modifications to the nameservers associated with .dk domains. By centralizing this function through DK Hostmaster, they maintain control and oversight over the nameserver settings for all .dk domains, helping to ensure the security, stability, and integrity of the Danish domain space.

<p class="callout warning">**Important:** If your .dk domain has **never used Joker.com nameservers -** for example, if you just transferred it to us while still using old external/foreign nameservers—you must **create a DNS zone** *before* switching to Joker.com nameservers at **DK Hostmaster (Punktum)**. To activate a zone, simply **create a [virtual zone](https://joker.com/faq/books/jokercom-faq-en/page/new-feature-virtual-zones)** or add **any [DNS record](https://joker.com/faq/books/jokercom-faq-en/page/jokercom-name-service-adding-dns-records)** in the DNS editor (even a placeholder TXT record is sufficient). Once a zone exists, you can successfully update your nameservers at Punktum.</p>

##### Adding DNSSEC

**If you use Joker.com nameservers**

Activating DNSSEC for your .dk domain is a **two-step process**:

1. **Activate DNSSEC in the Joker.com [DNS Editor](https://joker.com/faq/books/jokercom-faq-en/page/jokercom-name-service-adding-dns-records#bkmrk-2.-once-you%27ve-switc)**
    
    
    - Go to the [**DNS Editor**](https://joker.com/faq/books/jokercom-faq-en/page/jokercom-name-service-adding-dns-records#bkmrk-2.-once-you%27ve-switc) (not the *Modify* section as you would normally do).
    - Enable the **DNSSEC** switch.
    - This generates the necessary DNSSEC keys.
2. **Import DS records at DK Hostmaster (Punktum)**
    
    
    - Log in to your account at Punktum.
    - Open the **DNSSEC** section and choose **“Import DNSSEC keys.”**
    - Select **all keys**, or at least those using **SHA-256** or **SHA-384**.
    - Save your changes.

Afterwards, verify that everything is functioning correctly using the [DNSSEC Analyzer](https://dnssec-debugger.verisignlabs.com/)

**If you use foreign nameservers**

The process is similar:

1. **Activate/enable DNSSEC** at your external DNS provider (they will provide the DS records).
2. Go directly to Punktum and **import the DS records** in the DNSSEC management section.
3. **No changes are needed at Joker.com** in this case.

<p class="callout warning">**Important:** The **“Import DNSSEC Keys”** page at Punktum does **not work reliably in all browsers**. If the page freezes or shows no error but doesn't proceed, try a different browser. **Microsoft Edge** and **Google Chrome** work consistently.</p>


### .IT-Domains  


Similar to .de domains, .it domain registry has specific requirements for nameservers.

It is crucial to verify the compliance of your custom nameservers before registering an .it domain. If your nameservers do not meet the registry requirements, the domain will be **deleted within 30 days**. To check the compliance of your nameservers, you can use the following link:

 [https://www.nic.it/en/manage-your-it/dns-check](https://www.nic.it/en/manage-your-it/dns-check).