Checklist: Preparing to Deploy DNSSEC
Updated: October 7, 2009
Applies To: Windows Server 2008 R2
Tip
This topic applies to DNSSEC in Windows Server 2008 R2. DNSSEC support is greatly enhanced in Windows Server 2012. For more information, see DNSSEC in Windows Server 2012.
This checklist provides links to important concepts and procedures you can use as you prepare to deploy Domain Name Security Extensions (DNSSEC).
Note
When a reference link takes you to a conceptual topic or to a subordinate checklist, return to this topic after you review the conceptual topic or you complete the tasks in the subordinate checklist so that you can proceed with the remaining tasks in this checklist.
.gif)
Checklist: Preparing to deploy DNSSEC
| Task | Reference | |
|---|---|---|
.gif) |
Review zone signing requirements. |
|
|
Identify the key rollover mechanisms that you will use. |
|
|
Identify at least two secure computers, one of which runs the DNS server role on Windows Server® 2008 R2. The other computer does not have to be a DNS server. |
|
|
Identify zones to be secured. |
|
|
Back up a zone file from the authoritative DNS server. |
.gif)
.gif)