If your past supplier permits you to add DNSKEY information about the zone apex and use these information in responses to DNS queries, check with this migration tutorial to learn the way to migrate a zone with DNSSEC enabled. In the future we plan on releasing equipment to generate certificate https://erickrabzg.ageeksblog.com/26556867/postal-smtp-setup-an-overview