Hi, We are using BIND v9.8.2.
Currently, we are setting up AD infrastructure for internal/local network. We've configured one controller to be the primary for this local zone (fdu.local) for DNS queries. Our primary DNS server (which indeed is a different server) is configured to hold this as a slave. We would like configure DNSSEC and I am wondering where can we get this started from. We are planning to sign local zone (fdu.local). Is it required to sign the parent zone (fdu.edu) as well or we can live with it unsigned? What are pros and cons of signing parent zone (fdu.edu)? We've found information on signing zones on AD at least. Can some one provide us steps to enable and configure DNSSEC for our domains. Thanks in advance. Vishal K. Gandhi Systems Analyst/E-Mail Specialist University Systems and Security 1000 River Road, Teaneck NJ 07666 Mail Stop: T-BH1-01 : 201-692-2414 | : 201-692-2494 | : vgan...@fdu.edu "Fairleigh Dickinson University will never ask for your password. Please do not share it with others!"
_______________________________________________ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users