DNS provider integrations
Describing which DNS providers are able to be integrated with the HCL Domino Certificate Manager
Table of contents
The following DNS provider integrations are available. There is a separate directory containing the DXL files for each provider. Import the DXL file into certstore.nsf using the Action menu Import DXL. The imported document contains documentation for each provider.
Available DNS provider integrations
ACME-DNS
ACME-DNS is an open source project providing an open source based ACME optimized DNS server
Main features
- DNS designed for serving TXT records only for a validation subdomain
- REST based DNS TXT interface
- Intended for self-hosting in combination with DNS CNAME delegation for your existing domains
- Ready to go Docker image
bunny.net
bunny.net is a European content delivery network and web infrastructure provider that provides DNS hosting with a DNS-API.
DNS hosting is free up to 500 zones however each account has a minimum monthly spend of US$1 after the free trial.
Main features
- DNS service
- DNSSEC support
- REST based DNS TXT interface
- 2FA for secure admin interface authentication
- Records can be configured with latency/location based routing, weighting, and health checks which can be used to automatically failover your Domino/SafeLinx/Traveler “sprayer” hostnames in the event of a service issue.
Cloudflare
Cloudflare is providing free DNS services with a DNS-API.
Main features
- DNS service
- DNSSEC support
- REST based DNS TXT interface
- 2FA for secure admin interface authentication
ClouDNS.net
ClouDNS.net provides DNS hosting with a DNS API.
Main features
- DNS service
- REST based DNS TXT interface
- API sub-users with read/write access
- DNSSEC support
The configuration uses a ClouDNS API sub-user. Configure the API sub-user ID in the Authorization Key field and the API sub-user password in the Authorization Token field. If the registered domain is a host name or sub-domain, configure the DNS Zone field with the ClouDNS zone name.
deSEC e.V.
deSec is a free service provided by a registered non-profit organization based in Germany
Main features
- DNS provider including modern DNS security features for a dedicated or a Dyn DNS domain
- REST based DNS TXT interface
- Can be used for dynamic DNS for dial-up IP addresses (mainly for testing)
- DNS entries can be specified via graphical interface or REST based DNS API
This project is specially interesting for admins starting with DNS-01 challenges.
The configuration can be used from any server with outbound HTTPS connections.
For home use with a dynamic IP also HTTP-01 challenges should work.
Digital Ocean
Digital Ocean is providing free DNS services with a DNS-API
Main features
- DNS service registered domains and subdomains
- REST based DNS TXT interface
- 2FA for secure admin interface authentication
This service is very helpful in case you have an existing internet domain and want to delegate a subdomain to a provider with DNS TXT record API integration.
It works in combination with CNAME validation for domains hosted at a different provider
Hetzner
Hetzner is a German based internet service provider providing free DNS services with a DNS-API.
Starting November 2025 Hetzner moved their DNS interface to the Cloud console. This update makes it possible to manage DNS domains in separate projects with per-project API tokens.
Until moved to the new console continue to use the existing legacy API. As soon a DNS domain is migrated, the new API is required.
Main features
- DNS service
- REST based DNS TXT interface
- 2FA for secure admin interface authentication
IONOS Cloud
IONOS Cloud is a German based internet service provider providing free DNS services with a DNS-API.
Main features
- DNS service
- REST based DNS TXT interface
- Allows subdomain DNS services
- Support for DNSSEC
Support
DNS provider configurations are maintained by the HCL Domino community on best-effort basis. Customers are requested to submit pull requests for other DNS providers they have created an integration for.