Will answer part of your question with regards to KeNIC allowing registrars
update DS records. Yes they do allow and it’s pretty straight forward too.
This can be done on registrar interface provided by KeNIC.
Attached is an example of one of my domains signed.
Hope this answers part of your question.
On Wed, 6 Mar 2019 at 18:28, Mark Elkins via kictanet <
> Just did a search on DNSSEC in this group and get nothing.
> I see that co.ke (and ke!) is DNSSEC signed. That\’s Very Good.
> Does KeNIC accept DS records for entries in CO.KE?
> Do any Registrars have that in their interface?
> A search of \”dnssec\” on the KeNIC website shows nothing (I tried both case)
> Lastly – Are non-Kenyan based organisations allowed to be Registrars yet?
> The Application form (
> doesn\’t state you have to be in Kenya – though it asks for a \”KRA Pin
> Certificate\” – and I\’ve no clue what that it.
> I have a few co.ke domains and would love to add DNSSEC to them. My
> systems allow for that (talks EPP) and I have about 100 DNSSEC signed
> domains, mainly in ZA but also in other ccTLDs and GTLDs.
> Mark James ELKINS – Posix Systems – (South) Africamje@posix.co.za Tel: +27.128070590 Cell: +27.826010496
> For fast, reliable, low cost Internet in ZA: ftth.posix.co.za
> kictanet mailing list
> Twitter: http://twitter.com/kictanet
> Facebook: www.facebook.com/KICTANet/
> Unsubscribe or change your options at
> The Kenya ICT Action Network (KICTANet) is a multi-stakeholder platform
> for people and institutions interested and involved in ICT policy and
> regulation. The network aims to act as a catalyst for reform in the ICT
> sector in support of the national aim of ICT enabled growth and development.
> KICTANetiquette : Adhere to the same standards of acceptable behaviors
> online that you follow in real life: respect people\’s times and bandwidth,
> share knowledge, don\’t flame or abuse or personalize, respect privacy, do
> not spam, do not market your wares or qualifications.