Disabling zone signing turns off signing for a zone but leaves its DNSSEC keys in place and the signing policy linked to the zone.
To disable signing for one or more zones:
- Select the Settings tab in the sidebar, then select DNSSEC policies under DNS Settings.
- Select the name of the DNSSEC signing policy that is linked to the zones for which you want to disable signing.
- Select the checkbox for one or more zones, then select .
- From the Disable signing for linked objects window that opens, review the linked zones for which signing must be disabled.
- In the Change control section, add comments if required.
- Select Confirm.