Share via


Checklist: Sign a Zone

 

Applies To: Windows Server 2012 R2, Windows Server 2012

Checklist: Deploy DNSSEC > Checklist: Sign a Zone

This checklist includes procedures to help you sign a zone with DNSSEC.

Before you complete the tasks in this checklist, make sure you have performed the prerequisite tasks in the parent checklist, such as reviewing conceptual information about DNSSEC and deciding the deployment method and settings to use.

Note

Complete the tasks in this checklist in order. When a reference link takes you to a conceptual topic or to a subordinate checklist, return to this topic after you review the conceptual topic or after you complete the tasks in the subordinate checklist so that you can proceed with the remaining tasks in this checklist.

  Checklist: Sign a Zone

Task

Reference

Sign the zone by using one of three available options to specify zone signing parameters: custom, existing, or default.

Procedure: Customize Zone Signing Parameters

Procedure: Sign the Zone with Parameters of an Existing Zone

Procedure: Use Default Settings to Sign the Zone

Verify that the zone was successfully signed using the specified parameter values.

Procedure: Verify Zone Signing

See also

Overview of DNSSEC

DNSSEC in Windows

DNSSEC Deployment Planning

Appendix A: DNSSEC Terminology

Appendix B: Windows PowerShell for DNS Server