Tutorial ChProv

Last change on 2020-08-10 • Created on 2020-03-25


This tutorial describes the transfer of a domain to Hetzner using the Domain Registration Robot. Such a transfer is called a ChProv (change provider) or in German a KK order.

The basic steps are as follows:

  • Prepare migration with current provider
  • Create handles in the Robot
  • Create or configure nameservers
  • Start the ChProv order in the Robot

The transfer of a domain away from Hetzner is described in the article Domain Robot Tutorial KK Outgoing.

Prepare Migration With Current Provider

An Auth-Code (Authorization Code) for the domain needs to be requested from the current provider. This is a kind of password for the domain transfer and is used as a check to make sure the domain transfer is being done by an authorized person. Please ask the current provider which documents are needed for creating this code.

.at Domains

Since 30/09/2015 a domain transfer of a .at domain can only be carried out using an Auth-Code. Just like with other domain endings, the Auth-Code must be requested from the current provider/registrar.

.de Domains

The Auth-Code (AuthInfo1/AuthInfo2) of a .de domain has a maximum validity of 30 days.

More information on transferring a .de domain can be found on the website of DENIC (the central registry for .de domains).

.com/.net/.org/.info/.biz Domains

Check via a whois query whether the domain is currently locked (e.g. clientTransferProhibited). If this is the case then the lock must first be removed by the current provider.

For newly registered .com/.net/.org/.info/.biz domains a provider change can only be carried out after at least 60 days.

.eu Domains

The Auth-Code of a .eu domain has a validity of 40 days.

More information can be found on the EURid website (the central registry for .eu domains).

Adjusting the DNS Settings

If you have access to the zone entries for the currently entered name server(s) it might make sense to shorten the Time to live (TTL) of some entries. The host entries for mail and web servers can also be adjusted to their new values before the actual transfer is done.

The current provider is no longer available/is not cooperative

If the current provider is uncooperative or can no longer be reached, you as the domain holder/Admin-C still have ways of getting the Auth-Code of a domain, depending on the domain extension.

.at Domains

With .at domains a confirmation token can be requested from the future provider/registrar, which is sent by the nic.at to the currently stored email address of the domain owner. The token is valid for 21 days, and is bound to the requesting registrar. Once the token has been received, a ChProv order can be started via the Robot.

To request such a confirmation token, a support request via the Robot is sufficient. This does not incur additional costs.

If the currently stored email address of the domain owner is invalid or unreachable, an emergency token can be requested via the future provider/registrar. Eventual costs should be clarified in advance by sending a support request via the Robot.

.de Domains

With .de domains a so-called AuthInfo2 can be requested from any DENIC member. DENIC then sends the Authcode via registered post to the current address of the domain owner as shown in the whois database.

Applying for an Authinfo2 may incur additional costs. To apply for an Authinfo2 via Hetzner, please send us a support request via the Robot administration interface.

More information on transferring a .de domain can be found on the website of DENIC.

.com/.net/.org/.info/.biz Domains

The current provider of a .com/.net/.org/.info/.biz domain needs to be checked to see if they are themselves a registrar or simply a reseller. The registrar is displayed with a Whois query

If the current provider is not the registrar then it is recommended to request the Auth-Code directly from the actual registrar.

.eu Domains

With .eu domains a so-called emergency authorization code can be requested from the EURid. More information can be found on the EURid website.

Create Handles in the Robot

First - if this has not already been done – the handles (contact addresses) for the owner (Holder), the administrator (Admin-C), the technical manager (Tech-C) as well as the zone administrator (Zone-C) need to be created.

With .eu domains only the domain holder can be selected. With .at domains there is no Tech-C.

Existing handles that have been used in other domains can and should be reused. If it is always the same person/company then only a single handle needs to be created.

As long as the traffic light (status indicator in the Robot) is set to yellow for new handles, domains cannot be registered or transfered. The handles are usually created within a few minutes though.

Please note: For each TLD (Top Level Domain) separate handles must be created in the Robot. So, for example, a .de handle cannot be used for a .com domain.

Create Nameserver Entries

Regardless of whether you wish to use Hetzner nameservers or your own nameservers, it is recommended that you create the corresponding nameserver entries before starting the CHProv order.

More information can be found in the article on Creating DNS Entries in the Hetzner Robot.

Start the ChProv order in the Robot

The ChProv order can be started in the Robot by going to Domainsnew Domain. Only the domain name, the handles for Holder, Admin-C, Tech-C and Zone-C and the nameservers that will be used are needed.

The status of the domain transfer can be viewed online in the Robot. Go to Domains -> select incoming transfers from the drop-down menu at the top left and then click on Search.

The traffic light in the Robot is yellow after the start of the order. Should the light change to red, then something has gone wrong.

Some of these errors are described on the Robot Error Messages FAQ page. Once the error has been corrected the domain transfer can be started once more or a domain update be performed.

Using Your Own Nameservers

When using your own nameservers there are some special notes for certain domain endings.

.at/.de Domains

Please note: If you wish to use your "own" nameservers and the hostnames are located "within" the new domain (e.g. largecompany.de -> ns1.largecompany.de), then you need to add so-called glue records in the input fields for the nameservers using the scheme Nameserver name + space + IP address.

Example for the domain largecompany.de:


Should the glue record yield an IPv6 address as well as an IPv4 address, the entries must read as follows:

ns1.largecompany.de 12ab:23cd:34ef:0:0:0:0:1
ns2.largecompany.de 12ab:23cd:34ea:0:0:0:0:1

.com/.net/.org/.info/.biz/.eu Domains

If own nameservers are to be used, they need to be registered via the Robot, if not done so already, under DNS Entries -> Registered Nameservers.

Duration of the ChProv Order

With .at/.de/.eu domains the ChProv order is carried out within a few minutes.

A ChProv order for a .com/.net/.org/.info/.biz Domain is only performed after the current provider has confirmed the appropriate transfer request. The provider has five days to do so.

Despite the domain transfer, web pages belonging to the old server continue to be shown

This is normal, as the nameservers in the Internet temporarily save cache entries for mailservers, webservers etc. until the validity period (TTL) has expired and so do not recognize the new data.

Furthermore, some providers ignore the given period of validity. However, the transfer should be recognized by all nameservers between 3 and 5 days at the latest.

Table of Contents