Hi,

Can anyone let me know whether 2008 server is supporting RFC 4035 compliant DNSSEC feature.

Thanks in advance!

Regards.

Chand N

Need to support users over the internet? click here try our remote control online beta

Hi,

Based on my research, Windows Server2008 DNS provides basic support of the DNS Security Extensions (DNSSEC) protocol as defined in RFC 2535.

More information, please refer to:

Using DNS Security Extensions (DNSSEC)

http://technet2.microsoft.com/windowsserver/en/library/264820c4-55c7-42d6-9747-432af9556acc1033.mspx?mfr=true


What's New in DNS in Windows Server 2008

http://technet2.microsoft.com/windowsserver2008/en/library/47a23a74-e13c-46de-8d30-ad0afb1eaffc1033.mspx?mfr=true


Hope this helps.

Best wishes
--------------Morgan Che

Need to support users over the internet? click here try our remote control online beta

Windows Server 2008 does not fully support DNSSEC (reference RFCs 4033, 4034 and 4035).Microsoft will implement the Domain Name System Security Extensions (DNSSEC) as specified in RFCs 4033, 4034 and 4035 to allow federal agencies to comply withthe SC-20 and SC-21 security controls proposed in NIST 800-53 in the next release of Windows Server and client operating systems.Microsoft's DNSSEC support will allowagencies to satisfy requirementsoutlined in the memorandumissued by the Office of Management and Budget (OMB).Regards,TimMicrosoft Consulting ServicesMr.T

There is an amazing pack of free network admin tools. click here to download it

Mr.T7 said:

Windows Server 2008 does not fully support DNSSEC (reference RFCs 4033, 4034 and 4035).Microsoft will implement the Domain Name System Security Extensions (DNSSEC) as specified in RFCs 4033, 4034 and 4035 to allow federal agencies to comply withthe SC-20 and SC-21 security controls proposed in NIST 800-53 in the next release of Windows Server and client operating systems.Microsoft's DNSSEC support will allowagencies to satisfy requirementsoutlined in the memorandumissued by the Office of Management and Budget (OMB).Regards,TimMicrosoft Consulting Services

Mr.T
So how does this help the Federal Government? If it is mandated to implement DNSSEC by December 2009, when will the "next release of Windows Server and client operating systems" be shipped? Do you mean there will be an update to Windows 2008 to fully support DNSSEC within the time frame or do we have to wait for Windows 7?Tom

There is an amazing pack of free network admin tools. click here to download it

Is there any word on this? An update to current (including Server 2003 and 2008) DNS implementations would be VERY valuable for all of us in the Federal Government (and contractors).Thanks. Phil

Need to support users over the internet? click here try our remote control online beta

Understand that this is going to be a bundled feature of Windows 2008 R2. Will there be a backport to Windows 2008 or will my Government customers need to upgrade (in this case, probably replace as they are on the 32 bit kernel)?Thanks.

There is an amazing pack of free network admin tools. click here to download it

Is there any way to test this? My understanding is that the root servers on the internet backbone will turn on DNSSEC on May 5th which may cause disruption.

Need to support users over the internet? click here try our remote control online beta

This sites have tools to show you how to test.

http://labs.ripe.net/content/testing-your-resolver-dns-reply-size-issues


https://www.dns-oarc.net/oarc/services/replysizetest


Need to support users over the internet? click here try our remote control online beta

I did use the URLs to test and it seemed to work. So I guess it will resolve, is there anything I can check with tomorrow to make sure everything is still working?

There is an amazing pack of free network admin tools. click here to download it