Appendix A: Reviewing Key DNSSEC Concepts

Updated: October 7, 2009

Applies To: Windows Server 2008 R2

Tip

This topic applies to DNSSEC in Windows Server 2008 R2. DNSSEC support is greatly enhanced in Windows Server 2012. For more information, see DNSSEC in Windows Server 2012.

This section contains the following topics.

DNSSEC terminology

DNSSEC Terminology provides a table of DNSSEC related terms and definitions. References are also provided to applicable Request For Comments (RFC) documentation.

Introduction to DNSSEC

Introduction to DNSSEC discusses what DNSSEC is, why it is important, and how you can use DNSSEC to protect your network against security threats.

Understanding DNSSEC in Windows

Understanding DNSSEC in Windows describes how DNSSEC works in Windows Server® 2008 R2 and Windows® 7.

DNSSEC deployment planning

DNSSEC Deployment Planning provides hardware and software considerations, and recommendations for staging your DNSSEC deployment.

When to re-sign a zone file

When to Re-sign a Zone File describes the conditions under which it might be necessary to re-sign a zone. The following key rollover procedures are also provided:

• Perform a Pre-Published ZSK Rollover

• Perform a Double Signature ZSK Rollover

• Perform a Double Signature KSK Rollover

See Also

Concepts

Deploying DNS Security Extensions (DNSSEC)
Appendix B: The Name Resolution Policy Table (NRPT)