I have to push the hashes (DS records of the ksk) to the parent zone (tld). I think that only can do my domain registrar.