Forum Discussion
Cory_50405
Jun 02, 2014Noctilucent
You don't publish the DS record on your GTM. You provide the DS digest to dotgov for them to publish, along with the key tag, algorithm, digest type and expiration date.
Other than creating the DNSSEC zone and applying the appropriate KSK and ZSKs to the zone, you don't need to publish anything special in DNS.
Some good DNSSEC checking tools:
dnsviz.net dnscheck.iis.se