The selected DNS servers must be accessible without a proxy, as Entrust PKI Hub cannot reach a DNS server through one.