serverUpdateProhibited status

The registry has locked the domain against changes such as new name servers or contacts; only the registry can lift the lock.

serverUpdateProhibited at a glance
EPP status codeserverUpdateProhibited
RDAP statusserver update prohibited (per RFC 8056)
Set byRegistry
CategoryServer status (set by the registry)
Defined inRFC 5731
ICANN referenceicann.org/epp#serverUpdateProhibited

What serverUpdateProhibited means

serverUpdateProhibited makes the registry reject requests to update the domain, such as name server, contact or DNSSEC changes. It mirrors clientUpdateProhibited, but it is set by the registry and the registrar cannot remove it alone. In RDAP it appears as server update prohibited.

Together with serverTransferProhibited and serverDeleteProhibited it forms the typical registry lock. With this lock in place, even someone who takes over the registrar account cannot point the domain at different name servers.

ICANN notes that it is an uncommon status, usually applied during legal disputes, at the registrant's request or when the domain is in its redemption period.

Official definition: ICANN, EPP Status Codes: What Do They Mean, and Why Should I Know? (serverUpdateProhibited)

Why a domain has this status

  • The owner uses a registry lock service.
  • The domain is the subject of a legal dispute or court order.
  • The domain is in redemptionPeriod.

What you should do

  • DNS records you manage at your DNS host (A, MX, TXT and so on) can still be edited; only registry-level changes are blocked.
  • To change name servers or DNSSEC records on a registry-locked domain, ask your registrar to request a temporary unlock from the registry, make the change, then have the lock restored.
  • If you didn't ask for the lock, contact your registrar to find out why the registry set it.

Check a domain's status

Look up any domain to see its current status codes, registrar, expiration date and name servers from the registry's RDAP or WHOIS service.

  • clientUpdateProhibited: The registrar has locked the domain against changes, so its name servers, contacts and DNSSEC data can't be updated.
  • serverTransferProhibited: The registry has locked the domain against transfers to another registrar, often as part of a registry lock or during a dispute.
  • serverDeleteProhibited: The registry has locked the domain against deletion, which is typical of a registry lock and of domains in the redemption period.
  • pendingUpdate: A request to update the domain, such as a contact or name server change, has been received and is waiting to be completed.

Frequently asked questions

How do I change name servers on a domain with serverUpdateProhibited?

Ask your registrar to have the registry lift the lock. Registry lock services use a verified, often manual, unlock procedure, so allow extra time. After the change the lock can be applied again.

What is a registry lock?

A registry lock is a service offered by many registries through registrars. It sets serverUpdateProhibited, serverTransferProhibited and serverDeleteProhibited on a domain, and the registry only removes them after verifying the request outside the normal registrar systems. This protects high-value domains against hijacking even if the registrar account is compromised.

Further reading