DNSSEC Support in 2008 Server
Hi, Can anyone let me know whether 2008 server is supporting RFC 4035 compliant DNSSEC feature. Thanks in advance! Regards. Chand N
May 15th, 2008 5:44am

Hi, Based on my research, Windows Server2008 DNS provides basic support of the DNS Security Extensions (DNSSEC) protocol as defined in RFC 2535. More information, please refer to: Using DNS Security Extensions (DNSSEC) http://technet2.microsoft.com/windowsserver/en/library/264820c4-55c7-42d6-9747-432af9556acc1033.mspx?mfr=true What's New in DNS in Windows Server 2008 http://technet2.microsoft.com/windowsserver2008/en/library/47a23a74-e13c-46de-8d30-ad0afb1eaffc1033.mspx?mfr=true Hope this helps. Best wishes --------------Morgan Che
Free Windows Admin Tool Kit Click here and download it now
May 16th, 2008 8:19am

Windows Server 2008 does not fully support DNSSEC (reference RFCs 4033, 4034 and 4035).Microsoft will implement the Domain Name System Security Extensions (DNSSEC) as specified in RFCs 4033, 4034 and 4035 to allow federal agencies to comply withthe SC-20 and SC-21 security controls proposed in NIST 800-53 in the next release of Windows Server and client operating systems.Microsoft's DNSSEC support will allowagencies to satisfy requirementsoutlined in the memorandumissued by the Office of Management and Budget (OMB).Regards,TimMicrosoft Consulting ServicesMr.T
September 11th, 2008 7:25pm

Mr.T7 said: Windows Server 2008 does not fully support DNSSEC (reference RFCs 4033, 4034 and 4035).Microsoft will implement the Domain Name System Security Extensions (DNSSEC) as specified in RFCs 4033, 4034 and 4035 to allow federal agencies to comply withthe SC-20 and SC-21 security controls proposed in NIST 800-53 in the next release of Windows Server and client operating systems.Microsoft's DNSSEC support will allowagencies to satisfy requirementsoutlined in the memorandumissued by the Office of Management and Budget (OMB).Regards,TimMicrosoft Consulting Services Mr.T So how does this help the Federal Government? If it is mandated to implement DNSSEC by December 2009, when will the "next release of Windows Server and client operating systems" be shipped? Do you mean there will be an update to Windows 2008 to fully support DNSSEC within the time frame or do we have to wait for Windows 7?Tom
Free Windows Admin Tool Kit Click here and download it now
September 17th, 2008 11:19am

Is there any word on this? An update to current (including Server 2003 and 2008) DNS implementations would be VERY valuable for all of us in the Federal Government (and contractors).Thanks. Phil
September 30th, 2008 7:23pm

Understand that this is going to be a bundled feature of Windows 2008 R2. Will there be a backport to Windows 2008 or will my Government customers need to upgrade (in this case, probably replace as they are on the 32 bit kernel)?Thanks.
Free Windows Admin Tool Kit Click here and download it now
February 12th, 2009 3:01pm

Is there any way to test this? My understanding is that the root servers on the internet backbone will turn on DNSSEC on May 5th which may cause disruption.
May 3rd, 2010 9:15am

This sites have tools to show you how to test. http://labs.ripe.net/content/testing-your-resolver-dns-reply-size-issues https://www.dns-oarc.net/oarc/services/replysizetest
Free Windows Admin Tool Kit Click here and download it now
May 4th, 2010 2:19pm

I did use the URLs to test and it seemed to work. So I guess it will resolve, is there anything I can check with tomorrow to make sure everything is still working?
May 4th, 2010 10:15pm

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics