---
title: "Activate domain locking"
source_url: https://dev.digicert.com/certcentral-apis/services-api/domains/activate-domain-locking.html
api_method: PUT
api_endpoint: "/services/v2/domain/{{domain_id}}/activate-domain-locking"
api_url: "https://www.digicert.com/services/v2/domain/{{domain_id}}/activate-domain-locking"
---

**PUT** `https://www.digicert.com/services/v2/domain/{{domain_id}}/activate-domain-locking`

Use this endpoint to activate domain locking for a given domain. Domain locking prevents users in other CertCentral accounts from requesting certificates for the domain.

## Prerequisites

To use lock a domain, you must enable domain locking in your CertCentral account. See <a href="https://docs.digicert.com/en/certcentral/manage-certificates/organization-and-domain-management/domain-locking.html#enable-domain-locking-for-your-account" target="_blank" rel="noopener noreferrer">Domain locking – Enable domain locking for your account</a>.

## Finish protecting your domain

When you activate domain locking, the domain's lock status (`domain_locking_status`) becomes `pending`. To finish protecting your domain, you must:

1. Place the account token on the DNS CAA resource record for the domain (see <a href="https://docs.digicert.com/en/certcentral/manage-certificates/organization-and-domain-management/domain-locking.html#locking-a-domain" target="_blank" rel="noopener noreferrer">Domain locking – Locking a domain</a>, step 6). To get the account token (`account_token`), use the [Domain info](https://dev.digicert.com/md/certcentral-apis/services-api/domains/domain-info.md) API.
2. Check the CAA record for the domain by submitting a request to the [Check CAA (domain lock)](https://dev.digicert.com/md/certcentral-apis/services-api/domains/check-caa-domain-lock.md) endpoint.
3. If the information on the CAA record is correct, the domain's lock status becomes `enabled`, and the domain is locked.

## Example requests and responses

## cURL

```bash
curl -X PUT \
  'https://www.digicert.com/services/v2/domain/{{domain_id}}/activate-domain-locking' \
  -H 'Content-Type: application/json' \
  -H 'X-DC-DEVKEY: {{api_key}}'
```

## 204 No Content

```json
// No content
```

## Path parameters

<table>
<thead>
<tr>
<th>Name</th>
<th>Req/Opt</th>
<th>Description</th>
</tr>
</thead>
<tbody>
<tr>
<td>domain_id</td>
<td>required</td>
<td>Domain ID.</td>
</tr>
</tbody>
</table>