How to Add _globalsign-domain-verification TXT Record: A Detailed Guide with Examples and Diagrams

Contents: What is _globalsign-domain-verification TXT Record? Why Do You Need to Add This TXT Record? Step 1: Get the TXT Record from GlobalSign Step 2: Determine Where DNS is Hosted Step 3: Add the TXT Record in Your DNS Zone Step 4: Understanding TXT Record Format Step 5: Verify DNS Record Propagation Step 6: Optimize DNS Settings for Faster Verification Step 7: Notify GlobalSign & Complete Verification Troubleshooting Issues Summary Final Thoughts

Detailed guide for adding GlobalSign TXT record with examples and diagrams

What is _globalsign-domain-verification TXT Record?

The _globalsign-domain-verification TXT record is a DNS record used to verify domain ownership before issuing an SSL/TLS certificate from GlobalSign, a Certificate Authority (CA).

When you apply for an SSL certificate, GlobalSign requests you to add this TXT record to your DNS settings as part of the Domain Control Validation (DCV) process.

Why Do You Need to Add This TXT Record?

This verification method ensures that only the legitimate domain owner can obtain an SSL certificate, preventing unauthorized access.

Once the TXT record is successfully added and detected by GlobalSign, they will proceed with the SSL certificate issuance.

Step 1: Get the TXT Record from GlobalSign

After requesting an SSL certificate, GlobalSign provides a unique TXT verification record.

Example TXT Record Format:

_globalsign-domain-verification=abcdef1234567890abcdef1234567890

This is the exact value you must enter in your DNS settings. Do not modify or change the format of the record.

Step 2: Determine Where DNS is Hosted

Before adding the record, confirm where your domain's DNS settings are managed.

How to Find Your DNS Host

Check via Command Line:
nslookup -type=NS example.com
or
dig NS example.com

Replace example.com with your actual domain.
Check via WHOIS Lookup:
Use online tools like:
- Whois Lookup
- MXToolBox
The output will show your authoritative name servers (DNS provider). You will need to log in to this provider to add the TXT record.

Step 3: Add the TXT Record in Your DNS Zone

Example DNS Zone File Entry (BIND)

If you manage your own BIND DNS server, open the zone file:

sudo nano /etc/bind/zones/example.com.db

Add this entry:

_globalsign-domain-verification    IN    TXT    "abcdef1234567890abcdef1234567890"

Save the file and reload the DNS service:

sudo systemctl reload named
or
sudo rndc reload

Step 4: Understanding TXT Record Format

Diagram of DNS TXT Record Entry

Below is an example diagram of how the TXT record is structured:

Name	Type	Value
_globalsign-domain-verification	TXT	"abcdef1234567890abcdef1234567890"

Explanation of Each Column:

Name: _globalsign-domain-verification (This is the identifier provided by GlobalSign).
Type: TXT (Text record for verification).
Value: The unique verification code provided by GlobalSign.

Step 5: Verify DNS Record Propagation

After adding the TXT record, verify that it is correctly published.

Check Locally

Run:

dig TXT _globalsign-domain-verification.example.com
or
nslookup -type=TXT _globalsign-domain-verification.example.com

If the correct value appears, the record is correctly configured.

Check from External Servers

Use external tools:

Step 6: Optimize DNS Settings for Faster Verification

Lower the TTL for Faster Propagation

If verification is urgent, reduce the TTL (Time to Live) before making changes.

Open the DNS zone file:
sudo nano /etc/bind/zones/example.com.db
Set:
```
$TTL 300
```
(This reduces the waiting time to 5 minutes.)
Save and reload DNS.

Step 7: Notify GlobalSign & Complete Verification

Once the TXT record is detected, GlobalSign will automatically validate it. If verification does not complete within 24 hours:

Manually notify GlobalSign support.
Ensure the TXT record value exactly matches the one provided.

Troubleshooting Issues

Issue	Solution
TXT record not found	Ensure it is added in the correct zone file and DNS is reloaded.
Incorrect TXT value	Copy the exact value provided by GlobalSign, ensuring no typos.
DNS record not propagating	Lower TTL and wait up to 48 hours for propagation.
Query returns old data	Clear the local cache using `systemctl restart nscd`.
External queries fail	Verify firewall settings to allow external DNS queries.

Summary

Step	Action
1	Obtain the `_globalsign-domain-verification` TXT record from GlobalSign.
2	Find where the domain's DNS is managed.
3	Edit the DNS zone file and add the TXT record.
4	Reload the DNS service to apply changes.
5	Verify the record using dig or nslookup.
6	Ensure proper DNS propagation.
7	Wait for GlobalSign to detect the record and issue the SSL certificate.

Final Thoughts

By following this detailed guide, a system administrator can successfully add the _globalsign-domain-verification TXT record and complete the domain verification process for SSL certificate issuance.

This method ensures secure, automated verification for SSL certificates while preventing unauthorized access.

How to Add _globalsign-domain-verification TXT Record: A Detailed Guide with Examples and Diagrams

What is _globalsign-domain-verification TXT Record?

Why Do You Need to Add This TXT Record?

Step 1: Get the TXT Record from GlobalSign

Example TXT Record Format:

Step 2: Determine Where DNS is Hosted

How to Find Your DNS Host

Step 3: Add the TXT Record in Your DNS Zone

Example DNS Zone File Entry (BIND)

Step 4: Understanding TXT Record Format

Diagram of DNS TXT Record Entry

Explanation of Each Column:

Step 5: Verify DNS Record Propagation

Check Locally

Check from External Servers

Step 6: Optimize DNS Settings for Faster Verification

Lower the TTL for Faster Propagation

Step 7: Notify GlobalSign & Complete Verification

Troubleshooting Issues

Summary

Final Thoughts

Cloud Solution for Moodle LMS

Hosting

Cloud Solution

For You

VDS

Website Builders

Our services

Client Area

Select Currency

How to Add _globalsign-domain-verification TXT Record: A Detailed Guide with Examples and Diagrams

What is _globalsign-domain-verification TXT Record?

Why Do You Need to Add This TXT Record?

Step 1: Get the TXT Record from GlobalSign

Example TXT Record Format:

Step 2: Determine Where DNS is Hosted

How to Find Your DNS Host

Step 3: Add the TXT Record in Your DNS Zone

Example DNS Zone File Entry (BIND)

Step 4: Understanding TXT Record Format

Diagram of DNS TXT Record Entry

Explanation of Each Column:

Step 5: Verify DNS Record Propagation

Check Locally

Check from External Servers

Step 6: Optimize DNS Settings for Faster Verification

Lower the TTL for Faster Propagation

Step 7: Notify GlobalSign & Complete Verification

Troubleshooting Issues

Summary

Final Thoughts

Cloud Solution for Moodle LMS

Hosting

Cloud Solution

For You

VDS

Website Builders

Our services

Client Area

Выберите валюту