.ZA Registry Lock Policy & Process

1. Service Scope & Purpose

The Registry Lock Service is an out-of-band manual security process available for high-value domain names operating within South African second-level domains managed by ZARC (including .co.za, .net.za, .org.za, and .web.za).

Once applied, the Registry Lock bypasses standard automated registrar modifications. All status changes require direct, multi-factor manual verification between HostMyWebCloud's Authorized Lock Contact and the ZARC Registry Operator.

2. Applied Registry Statuses

When a domain name is placed under Registry Lock, the registry level sets three strict prohibition flags:

• serverUpdateProhibited: Prevents any updates to WHOIS contact details, delegation, or name servers.
• serverDeleteProhibited: Prevents all inadvertent or unauthorized domain deletion attempts.
• serverTransferProhibited: Prevents domain transfers or unauthorized registrar changes.

3. Activation & Telephonic Verification Process

To activate the .ZA Registry Lock, registrants must follow a verified multi-step administrative procedure:

• Order & Authentication: Submit a formal Registry Lock request via the HostMyWebCloud billing portal and establish a secure, confidential passphrase for authorized contacts.
• Out-of-Band Verification: ZARC contacts HostMyWebCloud's designated Authorized Lock Contact via telephone to manually authenticate the passphrase and validate request details.
• Lock Execution & Notification: Upon successful verification, ZARC applies the registry statuses and dispatches formal written confirmation to both HostMyWebCloud and the domain Registrant.

4. Unlocking, Modifications & Usage Thresholds

When DNS updates, name server modifications, or temporary administrative edits are required:

• Temporary Deactivation (Unlock): Registrants must request an unlock via the HostMyWebCloud legal desk. The registry performs telephonic passphrase authentication prior to unlocking.
• Unlock Allowance: Each annual Registry Lock period includes a maximum allowance of 5 (five) unlock/relock cycles per domain.
• Surcharges: Any temporary unlock requests exceeding the annual 5-cycle threshold will incur additional administrative surcharges per transaction as set out in the ZARC fee schedules.

5. Terms, Indemnity & Termination

In accordance with ZARC Registry Lock terms and conditions:

• Indemnification: The requesting party agrees to indemnify HostMyWebCloud South Africa (Pty) Ltd and ZARC against all losses, liabilities, claims, or damages arising from lock or unlock requests executed through verified passphrases.
• Passphrase Responsibility: Authorized contacts must maintain strict confidentiality of passphrases. Compromised credentials must be reported immediately via legal notice.
• Service Expiry: Registry Lock is billed annually. Failure to renew the service will result in lock expiration and domain status reversion to standard registry flags.