How a System Administrator Solves the _globalsign-domain-verification Issue

Verify Where DNS is Managed

Before making any changes, determine where the DNS for the domain is hosted.

Check the DNS Authoritative Server

Run the following command to check where the domain's nameservers point:

Replace example.com with the actual domain.

The output will list the authoritative nameservers. If your server is listed, you can proceed with adding the record. If the DNS is managed elsewhere, you may need to update the record on an external system.

Linux VDS

High performance for your projects

• Root access and flexible setup
• Control panel
• NVMe disks
• DDR5

View pricing

Add the TXT Record to the DNS Zone

Now, you need to edit the domain's DNS zone file and add the _globalsign-domain-verification TXT record.

Modify the Zone File (BIND or Any Other DNS Server)

1. Open the DNS zone file:
   sudo nano /etc/bind/zones/example.com.db

   (Modify the path if your DNS server uses a different directory.)

2. Add the TXT record at the bottom of the file:
   _globalsign-domain-verification IN TXT "abcdef1234567890abcdef1234567890"
3. Save the file and exit.

Reload the DNS Service

After modifying the DNS zone file, reload the DNS service to apply changes.

For BIND (named) DNS Server:

For PowerDNS:

For Knot DNS:

If your system uses a different DNS server, reload it accordingly.

Verify the TXT Record

After adding the record and reloading DNS, verify that it has been correctly published.

Check Locally

Run:

If the record appears with the correct value, the configuration is correct.

Check from External Servers

Use external tools to verify DNS propagation:

(This queries Google's public DNS resolver.)

Another option:

(This queries Cloudflare's public resolver.)

Ensure DNS Propagation

DNS records may take up to 48 hours to propagate. To speed up propagation, lower the TTL (Time to Live) before making changes.

1. Open the zone file again:
   sudo nano /etc/bind/zones/example.com.db
2. Find the TTL setting (usually near the top) and reduce it to 300 seconds (5 minutes):
   $TTL 300
3. Save the file and reload DNS.

Note: Once verification is complete, you can increase the TTL back to its original value.