Registry Lock | Common Troubleshooting

Registry Lock

Lock business-critical domains at the registry level for maximum security

Registry Lock implements an independent level of authentication above the registrar. It requires strict authentication of registrar staff by the registry operator before a domain can be released for updates, transfers, or other changes. This protects business-critical domains against unauthorised modifications, social engineering attacks, and accidental changes.

Available TLDs

InterNetX currently offers Registry Lock for the following TLDs. Further TLDs are available on request.

.AT .CH .COM .DE .NET .SE

Registry Lock can be ordered on request via sales@internetx.com.

How It Works Per TLD

.AT (NIC.AT): Activation by InterNetX Domain Operations. A lock contact is registered via email address. This contact authorises all future changes. To make changes: InterNetX removes the lock, but the lock contact must separately confirm each change. Deactivation also handled by InterNetX.
.DE (DENIC): Requires a lock form in written form for activation. The domain owner names a lock contact on the form who will be informed about and must authorise all future changes. Domain owner must be active (reachable) for activation. Updates remain possible, but every change requires separate confirmation by the lock contact. Lock contact must be reachable by SMS and email. Change of lock contact requires written form. Deactivation also requires written unlock form.
.CH (SWITCH): Activation by InterNetX Domain Operations. For changes: InterNetX temporarily removes the lock for 24 hours. Domain updates are possible during this window. After 24 hours, the domain is automatically re-secured with Registry Lock. Deactivation handled by InterNetX.
.COM / .NET (Verisign): Activation by InterNetX Domain Operations. For changes: InterNetX cancels the lock. After the domain update is completed, Registry Lock can be reactivated. Deactivation handled by InterNetX.
.SE (IIS): Activation by InterNetX Domain Operations. For changes: InterNetX temporarily removes the lock for 8 hours. Domain updates are possible during this window. After 8 hours, the domain is automatically re-secured with Registry Lock. Deactivation handled by InterNetX.

Comparison

TLD: Activation | Change Window | Lock Contact | Written Form
.AT: InterNetX | Per-change (manual remove + confirm) | Yes (email) | No
.DE: InterNetX | Per-change (manual remove + confirm) | Yes (SMS + email) | Yes (activation + deactivation)
.CH: InterNetX | 24-hour window (auto re-lock) | No | No
.COM/.NET: InterNetX | Manual cancel + reactivate | No | No
.SE: InterNetX | 8-hour window (auto re-lock) | No | No

What Registry Lock Protects Against

Unauthorised transfer: serverTransferProhibited applied at registry level. Cannot be removed by registrar alone.
Unauthorised update: serverUpdateProhibited prevents NS, contact, and WHOIS changes.
Unauthorised deletion: serverDeleteProhibited prevents accidental or malicious domain deletion.
Social engineering: Even if an attacker compromises the registrar account, they cannot modify the domain without the separate registry-level authentication.

⚠ Registry Lock does not protect against domain expiry. Ensure auto-renewal is configured alongside Registry Lock to prevent accidental expiration of locked domains.