This tutorial describes the transfer of a domain to Hetzner using the Domain Registration Robot. Such a transfer is called a ChProv (change provider) or in German a KK order.
The basic steps are as follows:
- Prepare migration with current provider
- Create handles in the Robot
- Create or configure nameservers
- Start the ChProv order in the Robot
The transfer of a domain away from Hetzner is described in the article Domain Robot Tutorial KK Outgoing.
An Auth-Code (Authorization Code) for the domain needs to be requested from the current provider. This is a kind of password for the domain transfer and is used as a check to make sure the domain transfer is being done by an authorized person. Please ask the current provider which documents are needed for creating this code.
Since 30/09/2015 a domain transfer of a .at domain can only be carried out using an Auth-Code. Just like with other domain endings, the Auth-Code must be requested from the current provider/registrar.
The Auth-Code (
AuthInfo2) of a .de domain has a maximum validity of 30 days.
More information on transferring a .de domain can be found on the website of DENIC (the central registry for .de domains).
Check via a whois query whether the domain is currently locked (e.g.
clientTransferProhibited). If this is the case then the lock must first be removed by the current provider.
For newly registered .com/.net/.org/.info/.biz domains a provider change can only be carried out after at least 60 days.
The Auth-Code of a .eu domain has a validity of 40 days.
More information can be found on the EURid website (the central registry for .eu domains).
If you have access to the zone entries for the currently entered name server(s) it might make sense to shorten the Time to live (TTL) of some entries. The host entries for mail and web servers can also be adjusted to their new values before the actual transfer is done.
If the current provider is uncooperative or can no longer be reached, you as the domain holder/Admin-C still have ways of getting the Auth-Code of a domain, depending on the domain extension.
With .at domains a confirmation token can be requested from the future provider/registrar, which is sent by the nic.at to the currently stored email address of the domain owner. The token is valid for 21 days, and is bound to the requesting registrar. Once the token has been received, a ChProv order can be started via the Robot.
To request such a confirmation token, a support request via the Robot is sufficient. This does not incur additional costs.
If the currently stored email address of the domain owner is invalid or unreachable, an emergency token can be requested via the future provider/registrar. Eventual costs should be clarified in advance by sending a support request via the Robot.
With .de domains a so-called
AuthInfo2 can be requested from any DENIC member. DENIC then sends the Authcode via registered post to the current address of the domain owner as shown in the whois database.
Applying for an Authinfo2 may incur additional costs. To apply for an Authinfo2 via Hetzner, please send us a support request via the Robot administration interface.
More information on transferring a .de domain can be found on the website of DENIC.
The current provider of a .com/.net/.org/.info/.biz domain needs to be checked to see if they are themselves a registrar or simply a reseller. The registrar is displayed with a Whois query
If the current provider is not the registrar then it is recommended to request the Auth-Code directly from the actual registrar.
With .eu domains a so-called
emergency authorization code can be requested from the EURid. More information can be found on the EURid website.
First - if this has not already been done – the handles (contact addresses) for the owner (Holder), the administrator (Admin-C), the technical manager (Tech-C) as well as the zone administrator (Zone-C) need to be created.
With .eu domains only the domain holder can be selected. With .at domains there is no Tech-C.
Existing handles that have been used in other domains can and should be reused. If it is always the same person/company then only a single handle needs to be created.
As long as the traffic light (status indicator in the Robot) is set to yellow for new handles, domains cannot be registered or transfered. The handles are usually created within a few minutes though.
Please note: For each TLD (Top Level Domain) separate handles must be created in the Robot. So, for example, a .de handle cannot be used for a .com domain.
Regardless of whether you wish to use Hetzner nameservers or your own nameservers, it is recommended that you create the corresponding nameserver entries before starting the CHProv order.
More information can be found in the article on Creating DNS Entries in the Hetzner Robot.
The ChProv order can be started in the Robot by going to
new Domain. Only the domain name, the handles for Holder, Admin-C, Tech-C and Zone-C and the nameservers that will be used are needed.
The status of the domain transfer can be viewed online in the Robot. Go to
Domains -> select
incoming transfers from the drop-down menu at the top left and then click on
The traffic light in the Robot is
yellow after the start of the order. Should the light change to
red, then something has gone wrong.
Some of these errors are described on the Robot Error Messages FAQ page. Once the error has been corrected the domain transfer can be started once more or a domain update be performed.
When using your own nameservers there are some special notes for certain domain endings.
Please note: If you wish to use your "own" nameservers and the hostnames are located "within" the new domain (e.g.
ns1.largecompany.de), then you need to add so-called glue records in the input fields for the nameservers using the scheme
Nameserver name + space + IP address.
Example for the domain
ns1.largecompany.de 18.104.22.168 ns2.largecompany.de 22.214.171.124
Should the glue record yield an IPv6 address as well as an IPv4 address, the entries must read as follows:
ns1.largecompany.de 126.96.36.199 12ab:23cd:34ef:0:0:0:0:1 ns2.largecompany.de 188.8.131.52 12ab:23cd:34ea:0:0:0:0:1
If own nameservers are to be used, they need to be registered via the Robot, if not done so already, under
DNS Entries ->
With .at/.de/.eu domains the ChProv order is carried out within a few minutes.
A ChProv order for a .com/.net/.org/.info/.biz Domain is only performed after the current provider has confirmed the appropriate transfer request. The provider has five days to do so.
This is normal, as the nameservers in the Internet temporarily save cache entries for mailservers, webservers etc. until the validity period (TTL) has expired and so do not recognize the new data.
Furthermore, some providers ignore the given period of validity. However, the transfer should be recognized by all nameservers between 3 and 5 days at the latest.