← Content Support

DNS

DNS Team

  • Emily Cope
  • Lucas Everett
  • Krishna Ghamandi
  • Shea Hardin
  • Niki Merriwether
  • Toni Ward

What name servers do we manage?

DNS AccountName ServersContact
AWS DNSns-1432.awsdns-51.org
ns-1670.awsdns-16.co.uk
ns-325.awsdns-40.com
ns-554.awsdns-05.net
WebSol DNS
Cloudflare DNSns1.jh-cf.com
ns2.jh-cf.com
ns1.jh-cf.bank
ns2.jh-cf.bank		WebSol DNS

Where do I send a request for DNS changes?

Find the nameservers for the domain using the lookup tool. Then review What name servers do we manage.

DNS Requests for WebSOL DNS

All DNS requests that go to the web solutions support team can be submitted via email at websoldns@jackhenry.com. Below is the preferred format for requests.

1 Email Subject should include the domain name and nameservers. Either AWS or Cloudflare.

2 Email body should include the full record(s) listed out. Please do not include screenshots of records. Additionally, if there are numerous records, especially with long values, please provide them in a txt file.

How can I get a copy of the zone file for a domain?

First, identify the nameservers using the lookup tool. Then send the request to either WebSol DNS or IS Operations (jSource Ticket). If the bank has requested the zone file because they are transferring DNS away from us, they can update the nameservers to the new DNS host after importing the zone.

Do we charge for DNS changes?

  1. For Banno clients, we do not charge for DNS changes or zone setups.

Can we accommodate after-hours DNS requests?

  1. This can be accommodated. However, it needs to be scheduled with the appropriate team ahead of time.
  2. Standard after hours fees apply.
    1. $250 Monday-Friday, $350 Weekends and Holidays
  3. If this is a DNS request that comes in after hours, the fee still applies. You would then need to reach out to the appropriate team to make the change.
    1. If the DNS is with the WebSol Support team, you can escalate the case to either Emily or Krishna to complete the DNS edit, if the on call person is not part of the DNS team.

Can DNSSEC be enabled for a domain?

DNSSEC is a security feature that can enabled at both the registrar and in the DNS setup, and it can be enabled for any domain. However, we do not currently have the ability to enable DNSSEC for a domain that is hosted in AWS. The domain would need to be migrated to Cloudflare before DNSSEC can be enabled. There is a specific process that must be followed to prevent downtime. Please contact WebSol DNS for more information.

Can we add a CAA record for a domain?

A CAA record is a security feature that offers the ability to restrict purchases of SSL certs to specific vendors. While CAA records can be added for any domain that we host, they are not required, and they can cause issues with future SSL cert orders.

Can we add an SPF record for a domain that doesn’t currently have one?

Yes, we can add an SPF record at any time. However, it isn’t something we can generate for the customer, as there are some decisions that they’ll have to make about how it is set up. They should use the SPF Generator and send us the completed record.

Can we add a DMARC record?

DMARC records work alongside SPF and DKIM records to protect a domain from unauthorized use. While DKIM works by digitally signing an email on the server at the time it is sent, SPF records are an authorized list of servers that send emails on behalf of a domain. Phishing and spam emails are a major problem, and DMARC, DKIM, and SPF records serve a vital role in protecting an institution’s domains from abuse. Please contact WebSol DNS for more information.

Can a bank transfer DNS to us that is currently hosted somewhere else?

Yes, a bank can transfer their DNS to us for hosting. Please ask them to provide a current copy of their zone file. Then you will need to set up a case and send it to Launch Control to add a new zone for the domain. If it is a .bank domain that they’d like to transfer, WebSol DNS can help with that.

What are the NetTeller DKIM records?

If an institution is having email deliverability issues for NetTeller, please reach out to the NetTeller support team. You should also verify that their DKIM records have been created as below.

  • jhais1._domainkey. IN CNAME key1.netteller.com.
  • jhais2._domainkey. IN CNAME key2.netteller.com.
  • jhais3._domainkey. IN CNAME key3.netteller.com.
  • jhais4._domainkey. IN CNAME key4.netteller.com.

What are the jhahosted DKIM records?

If an institution is having email deliverability issues for *.jhahosted.com, please reach out to HPS - SO Partner Solutions. You should also verify that their DKIM records have been created as below.

  • jhahps1._domainkey. IN CNAME key1.jhahosted.com
  • jhahps2._domainkey. IN CNAME key2.jhahosted.com.

What are the JHA OpenAnywhere DKIM records?

If an institution is having email deliverability issues for OpenAnywhere, please either email JHA OpenAnywhere Support or send a case to the JHA OpenAnywhere Support provider group. The team’s manager, Brandi Branstetter, and other team members can also be reached in Teams.

The DKIM records are unique for each domain, but below are some example records.

  • tjfumutlgevdkj5cj23orybkwymjkl7p._domainkey. IN CNAME tjfumutlgevdkj5cj23orybkwymjkl7p.dkim.amazonses.com.
  • 3ht3cfs5sljcts6kiir6uczsrkm2q6h5._domainkey. IN CNAME 3ht3cfs5sljcts6kiir6uczsrkm2q6h5.dkim.amazonses.com.
  • mqxc5nkmtylnhps6brogx6kwlixrdbij._domainkey. IN CNAME mqxc5nkmtylnhps6brogx6kwlixrdbij.dkim.amazonses.com.