Hi, Can anyone let me know whether 2008 server is supporting RFC 4035 compliant DNSSEC feature. Thanks in advance! Regards. Chand N

Hi, Based on my research, Windows Server2008 DNS provides basic support of the DNS Security Extensions (DNSSEC) protocol as defined in RFC 2535. More information, please refer to: Using DNS Security Extensions (DNSSEC) http://technet2.microsoft.com/windowsserver/en/library/264820c4-55c7-42d6-9747-432af9556acc1033.mspx?mfr=true What's New in DNS in Windows Server 2008 http://technet2.microsoft.com/windowsserver2008/en/library/47a23a74-e13c-46de-8d30-ad0afb1eaffc1033.mspx?mfr=true Hope this helps. Best wishes --------------Morgan Che

Windows Server 2008 does not fully support DNSSEC (reference RFCs 4033, 4034 and 4035).Microsoft will implement the Domain Name System Security Extensions (DNSSEC) as specified in RFCs 4033, 4034 and 4035 to allow federal agencies to comply withthe SC-20 and SC-21 security controls proposed in NIST 800-53 in the next release of Windows Server and client operating systems.Microsoft's DNSSEC support will allowagencies to satisfy requirementsoutlined in the memorandumissued by the Office of Management and Budget (OMB).Regards,TimMicrosoft Consulting ServicesMr.T

Mr.T7 said: Windows Server 2008 does not fully support DNSSEC (reference RFCs 4033, 4034 and 4035).Microsoft will implement the Domain Name System Security Extensions (DNSSEC) as specified in RFCs 4033, 4034 and 4035 to allow federal agencies to comply withthe SC-20 and SC-21 security controls proposed in NIST 800-53 in the next release of Windows Server and client operating systems.Microsoft's DNSSEC support will allowagencies to satisfy requirementsoutlined in the memorandumissued by the Office of Management and Budget (OMB).Regards,TimMicrosoft Consulting Services Mr.T So how does this help the Federal Government? If it is mandated to implement DNSSEC by December 2009, when will the "next release of Windows Server and client operating systems" be shipped? Do you mean there will be an update to Windows 2008 to fully support DNSSEC within the time frame or do we have to wait for Windows 7?Tom

Is there any word on this? An update to current (including Server 2003 and 2008) DNS implementations would be VERY valuable for all of us in the Federal Government (and contractors).Thanks. Phil

Understand that this is going to be a bundled feature of Windows 2008 R2. Will there be a backport to Windows 2008 or will my Government customers need to upgrade (in this case, probably replace as they are on the 32 bit kernel)?Thanks.

Is there any way to test this? My understanding is that the root servers on the internet backbone will turn on DNSSEC on May 5th which may cause disruption.

This sites have tools to show you how to test. http://labs.ripe.net/content/testing-your-resolver-dns-reply-size-issues https://www.dns-oarc.net/oarc/services/replysizetest

I did use the URLs to test and it seemed to work. So I guess it will resolve, is there anything I can check with tomorrow to make sure everything is still working?