Tutorial ChProv

Last change on 2021-07-12 • Created on 2020-03-25 • ID: RO-E128A

Introduction

This tutorial describes how to transfer a domain to Hetzner using the Domain Registration Robot. This kind of transfer is called a ChProv (change provider) or in German a KK order.

The basic steps are as follows:

  • Prepare for the migration with your current provider
  • Create handles on Robot
  • Create or configure nameservers
  • Start the ChProv order on Robot

If you want to transfer a domain away from Hetzner to another provider, please go to this article Tutorial ChProv outgoing.

Prepare for the migration with your current provider

First, you need to request an Auth-Code (Authorization Code) for the domain from your current provider. This is a kind of password for the domain transfer and is used as a check to make sure the domain transfer is done by an authorized person. Please ask your current provider which documents you need to give them. Then your provider will generate an Auth-Code and give it to you.

.at domains

Starting on 30 September 2015, Auth-Codes also became required to carry out a domain transfer for .at domains. Just like with other domain endings, you need to request the Auth-Code from your current provider/registrar.

.de domains

The Auth-Code (AuthInfo1/AuthInfo2) of a .de domain has a maximum validity of 30 days.

You can find more information on transferring a .de domain on the website of DENIC (the central registry for .de domains).

.com/.net/.org/.info/.biz domains

You can use a whois query to check whether the domain is currently locked (e.g. clientTransferProhibited). If this is the case, then you first need to request the current provider to remove the lock.

For newly registered .com/.net/.org/.info/.biz domains, you can only change providers after you have had the domain for at least 60 days.

.eu domains

The Auth-Code of a .eu domain has a validity of 40 days.

More information can be found on the EURid website (the central registry for .eu domains).

Adjusting the DNS Settings

If you have access to the zone entries for the currently entered name server(s), it might make sense to shorten the time to live (TTL) of some entries. You can also add the new values to the host entries for mail and web servers before the actual transfer takes place.

The current provider is no longer available/is not cooperative

If the current provider is uncooperative or you can no longer reach them, you as the domain holder/Admin-C still have ways of getting the Auth-Code of a domain. The process changes depending on the domain extension.

.at domains

With .at domains, you can request a confirmation token from the future provider/registrar. The the nic.at will send this token to the email address currently on file for the domain owner. The token is valid for 21 days, and is bound to the requesting registrar. Once the token has been received, you can request a ChProv order via Robot.

To request a confirmation token, all you need to do is send us a support request via Robot. This will not cost you anything.

If the email address of the domain owner is invalid or unreachable, you can request an emergency token via the future provider/registrar. You should ask about the cost of an emergency token before you request it. To do this, send usa support request via Robot.

.de domains

With .de domains, you need to request something called an AuthInfo2. You can request this from any DENIC member. DENIC then sends the Authcode via registered post to the current address of the domain owner as shown in the whois database.

It may cost you something to request an Authinfo2. To apply for an Authinfo2 via Hetzner, please send us a support request via Robot.

You can find more information on transferring a .de domain on the DENIC website.

.com/.net/.org/.info/.biz domains

For .com/.net/.org/.info/.biz domains, you should first check whether the previous contractual partner is acting as registrar for the domain themselves or only as reseller. You can see who the registrar is by doing a Whois query.

If the current provider is not the registrar, then it is recommended to request the Auth-Code directly from the actual registrar.

.eu domains

With .eu domains, you need to request something called an emergency authorization code from the EURid. You can find more information on the EURid website.

Create handles on Robot

First — if you have not done this already — you need to create the handles (contact addresses) for the owner (Holder), the administrator (Admin-C), the technical manager (Tech-C), and the zone administrator (Zone-C).

With .eu domains, you can only select the domain holder. With .at domains, there is no Tech-C.

You can and should re-use existing handles that have been used in other domains. If it is always the same person/company, then you only need to create a single handle.

As long as the traffic light (status indicator on Robot) is set to yellow for new handles, you cannot transfer or register domains. The handles are usually created within a few minutes, though.

Please note: For each TLD (Top Level Domain), you need to create separate handles on Robot. So, for example, you cannot use a .de handle for a .com domain.

Create nameserver entries

Regardless of whether you wish to use Hetzner nameservers or your own nameservers, it is recommended that you create the corresponding nameserver entries before starting the CHProv order.

You can find more information in the article on Creating DNS Entries on the DNS Console.

Start the ChProv order on Robot

You can start the ChProv order on Robot by going to DomainsNew domain. You only need the domain name, the handles, and the nameservers that you will use.

You can view the status of the domain transfer online on Robot. Go to Domains -> select incoming transfers from the drop-down menu at the top left and then click on Search.

The traffic light on Robot will be yellow after the order process starts. If the light changes to red, then something has gone wrong.

Some of these errors are described on the Robot Error Messages FAQ page. Once the error has been corrected, you can re-start the domain transfer or you can do a domain update.

Using your own nameservers

When using your own nameservers, there are some special notes for certain domain endings.

.at/.de Domains

Please note: If you wish to use your "own" nameservers and the hostnames are located "within" the new domain (for example, largecompany.de -> ns1.largecompany.de), then you need to add glue records in the input fields for the nameservers using the scheme Nameserver name + space + IP address.

Here's an example for the domain largecompany.de:

ns1.largecompany.de 213.133.98.96
ns2.largecompany.de 213.133.99.99

Should the glue record yield an IPv6 address as well as an IPv4 address, the entries must read as follows:

ns1.largecompany.de 213.133.98.96 12ab:23cd:34ef:0:0:0:0:1
ns2.largecompany.de 213.133.99.99 12ab:23cd:34ea:0:0:0:0:1

.com/.net/.org/.info/.biz/.eu domains

If you plan to use your own nameservers, you need to register them on Robot. If you have not done this already, log onto Robot and go to Domains -> Registered nameservers.

Duration of the ChProv Order

With .at/.de/.eu domains, the ChProv order takes just a few minutes.

A ChProv order for a .com/.net/.org/.info/.biz domain, will take place only after the current provider has confirmed the appropriate transfer request. The provider has five days to do so.

Despite the domain transfer, web pages belonging to the old server continue to be shown

This is normal. The nameservers on the Internet temporarily cache the entries for mail servers, web servers etc. until the validity period (TTL) has expired, so they do not recognize the new data.

Furthermore, some providers ignore the specified validity period. However, all nameservers should recognize the transfer between 3 and 5 days at the latest.

Table of Contents