> ## Documentation Index
> Fetch the complete documentation index at: https://docs.rad.security/llms.txt
> Use this file to discover all available pages before exploring further.

# DNS Made Easy

> Configure the DNS Made Easy integration with RAD Security to ingest managed domains and DNS records.

# DNS Made Easy Integration Setup

This guide walks you through integrating DNS Made Easy with RAD Security to ingest your managed domains/zones and DNS records, including GTD/failover configuration, for external attack-surface analysis.

DNS Made Easy provides managed authoritative DNS. RAD Security connects to the DNS Made Easy API and pulls your zones and records on a scheduled basis. DNS Made Easy is **DNS-only** — it does not handle domain registration or TLS issuance. It complements CSC Global, which covers registration and TLS.

<Info>
  **Read-only integration:** RAD Security only reads data from DNS Made Easy. It never creates, modifies, or deletes domains or DNS records in your account.
</Info>

## Prerequisites

Before you begin, ensure you have:

<Check>
  * A DNS Made Easy account on a **Business plan or higher** (required for API access)
  * Ability to generate an API Key and Secret Key in the Control Panel
  * Access to a RAD Security workspace with integration permissions
</Check>

<Warning>
  **Business plan required:** DNS Made Easy's API requires a **Business plan or higher**. If your account is on a lower tier, API calls are rejected and the integration cannot connect.
</Warning>

## Understanding Integration Components

<AccordionGroup>
  <Accordion title="API Key + Secret Key" icon="key">
    RAD Security authenticates with a DNS Made Easy **API Key** and **Secret Key**. You supply both; RAD signs each request using HMAC-SHA1 with the secret key.
  </Accordion>

  <Accordion title="HMAC Request Signing" icon="signature">
    The integration authenticates with HMAC request signing, which depends on accurate time. RAD Security handles request signing and time synchronization automatically — you only need to provide the two keys.
  </Accordion>

  <Accordion title="Sandbox vs Production" icon="flask">
    DNS Made Easy offers a sandbox environment for testing. Enable the **Sandbox** option to use the sandbox API instead of production. Sandbox keys are issued separately from the sandbox control panel.
  </Accordion>
</AccordionGroup>

***

## Step 1: Generate API Keys in DNS Made Easy

<Steps>
  <Step title="Sign in to the Control Panel">
    Log in to the DNS Made Easy Control Panel. For sandbox keys, use the sandbox control panel at [sandbox.dnsmadeeasy.com](https://sandbox.dnsmadeeasy.com).
  </Step>

  <Step title="Open Account Information">
    Navigate to **Config → Account Information**, where API access is managed.
  </Step>

  <Step title="Generate API Key and Secret Key">
    Generate your **API Key** and **Secret Key**.

    <Warning>
      Copy the **Secret Key** immediately and store it securely in a password manager or secrets vault. You will need both keys to configure the integration.
    </Warning>
  </Step>
</Steps>

<Note>
  Exact Control Panel navigation and labels may vary. See the [DNS Made Easy API documentation](https://api-docs.dnsmadeeasy.com/) for the current steps to generate API keys.
</Note>

***

## Configure in RAD Security

Navigate to your RAD Security workspace and configure the DNS Made Easy integration with the following parameters:

### Required Parameters

| Parameter      | Description              |
| -------------- | ------------------------ |
| **API Key**    | DNS Made Easy API key    |
| **Secret Key** | DNS Made Easy secret key |

### Optional Parameters

| Parameter   | Description                                                                    |
| ----------- | ------------------------------------------------------------------------------ |
| **Sandbox** | Use the DNS Made Easy sandbox API instead of production (boolean; default off) |

<Note>
  The integration authenticates with HMAC request signing, which depends on accurate time. This is handled by RAD Security automatically.
</Note>

***

## Verify Integration

<Steps>
  <Step title="Check Connection Status">
    1. Navigate to **Data Sources > Integrations > Domain Security** in RAD Security
    2. Locate your DNS Made Easy integration
    3. Verify the connection status shows as **Connected**
  </Step>
</Steps>

<Check>
  Your DNS Made Easy integration is now configured! RAD Security will ingest your managed domains and DNS records on a scheduled basis.
</Check>

## What Data is Synced

<AccordionGroup>
  <Accordion title="Managed Domains / Zones" icon="globe">
    * Managed domains/zones as domain assets
    * Nameservers
    * DNSSEC status
  </Accordion>

  <Accordion title="DNS Records" icon="server">
    * A/AAAA/CNAME/MX/TXT/NS/SRV/CAA records
    * GTD/failover configuration
  </Accordion>
</AccordionGroup>

<Note>
  DNS Made Easy is DNS-only — it does not cover domain registration or TLS issuance. Pair it with [CSC Global](/rad-security/integrations/domain-security/csc-global-setup) for registration and TLS coverage.
</Note>

## Use Cases

<CardGroup cols={2}>
  <Card title="Attack Surface Analysis" icon="diagram-project">
    Map your external footprint across managed zones and DNS records.
  </Card>

  <Card title="DNS Posture Hygiene" icon="shield-check">
    Track nameservers, DNSSEC status, and record configuration across your zones.
  </Card>

  <Card title="Failover Visibility" icon="arrows-rotate">
    Surface GTD/failover configuration to understand traffic-steering and resilience setup.
  </Card>

  <Card title="Complementary DNS Coverage" icon="layer-group">
    Combine operational DNS from DNS Made Easy with registration and TLS from CSC Global.
  </Card>
</CardGroup>

## Troubleshooting

<AccordionGroup>
  <Accordion title="Authentication Failed" icon="triangle-exclamation">
    **Possible causes:**

    * Incorrect API Key or Secret Key

    **Solution:**

    * Verify both keys are copied correctly (no extra spaces)
    * Regenerate the keys in **Config → Account Information** and update them in RAD Security
    * Confirm sandbox keys are used only with the **Sandbox** option enabled
  </Accordion>

  <Accordion title="Plan Gate" icon="lock">
    **Possible causes:**

    * The account is not on a Business plan or higher, so API access is unavailable

    **Solution:**

    * Upgrade the DNS Made Easy account to a **Business plan or higher** to enable the API
  </Accordion>

  <Accordion title="Clock Skew" icon="clock">
    **Possible causes:**

    * HMAC request signing rejected due to time drift (rare)

    **Solution:**

    * This is handled by RAD Security automatically; no action is normally required
  </Accordion>

  <Accordion title="Empty Results" icon="inbox">
    **Possible causes:**

    * The account has no managed domains

    **Solution:**

    * Confirm the account has managed domains/zones in the DNS Made Easy Control Panel
  </Accordion>
</AccordionGroup>

## Security Best Practices

<CardGroup cols={2}>
  <Card title="Use a Service Account" icon="user-gear">
    Generate API keys under a dedicated account rather than a personal login.
  </Card>

  <Card title="Rotate Keys" icon="rotate">
    Regenerate the API Key and Secret Key periodically according to your security policy.
  </Card>

  <Card title="Secure Storage" icon="vault">
    Store the Secret Key in a secrets vault. Never commit it to version control.
  </Card>

  <Card title="Use Sandbox for Testing" icon="flask">
    Validate configuration against the sandbox before connecting production.
  </Card>
</CardGroup>

## Additional Resources

<CardGroup cols={2}>
  <Card title="DNS Made Easy API" icon="book" href="https://api-docs.dnsmadeeasy.com/">
    Official DNS Made Easy API documentation
  </Card>

  <Card title="Domain Security Overview" icon="globe" href="/rad-security/integrations/domain-security/overview">
    Learn about RAD's domain security integrations
  </Card>
</CardGroup>

## Next Steps

<CardGroup cols={2}>
  <Card title="CSC Global Setup" icon="globe" href="/rad-security/integrations/domain-security/csc-global-setup">
    Complement DNS Made Easy with registration and TLS from CSC Global
  </Card>

  <Card title="Domain Security Overview" icon="globe" href="/rad-security/integrations/domain-security/overview">
    Explore other domain security integration options
  </Card>

  <Card title="Data Sources" icon="database" href="/rad-security/integrations/data-sources">
    Connect additional security data sources
  </Card>
</CardGroup>