Donate
‹ Back
Deploy360 20 March 2014

Microsoft Publishes Guide To Deploying DNSSEC In Windows Server 2012

By Dan York Senior Manager, Content and Web Strategy

Microsoft DNSSEC GuideDo you work in an enterprise using Microsoft Windows Server 2012 and are interested in either deploying DNSSEC validation to provide better security to your users – and/or securing your own DNS zones using DNSSEC?

If so, the good folks at Microsoft just recently released a new guide “DNSSEC in Windows Server 2012” that guides you through what you need to do to deploy DNSSEC in Windows Server 2012 and Windows Server 2012 R2.  I’d note that it covers both the validation and signing sides of DNSSEC.

The document has four major sections:

  • Overview of DNSSEC
  • DNSSEC in Windows
  • DNSSEC Deployment Planning
  • Deploy DNSSEC with Windows Server 2012

as well as few appendices.  The document goes into quite a deep level of detail with how DNSSEC is integrated into various aspects of Windows Server 2012.  The “Deployment Planning” section seemed quite useful, too, as it explored some of the performance requirements and also suggested a process for staging a deployment.

In reading through the document, I was quite impressed by the “Deploy DNSSEC with Windows Server 2012” section that includes many different checklists to help administrators know precisely what they need to be doing.  While I don’t personally work with a Windows Server 2012, the checklists seemed to be covering the areas that I would want them to cover.

As we look to get more enterprises doing DNSSEC validation and also signing their own zones, it is great to see this document come out of Microsoft!    If you work with Microsoft Windows Server 2012, definitely do give it a look – and start deploying DNSSEC today!

‹ Back

Related articles

Excellent whitepaper/tutorial from SURFnet on deploying DNSSEC-validating DNS servers
Deploy36023 October 2012

Excellent whitepaper/tutorial from SURFnet on deploying DNSSEC-validating DNS servers

How do you get started with deploying DNSSEC-validating DNS servers on your network?  What kind of planning should you undertake? ...

Email Hijacking - New Research Shows Why We Need DNSSEC Now!
Deploy36012 September 2014

Email Hijacking – New Research Shows Why We Need DNSSEC Now!

Want a great example of why we need DNSSEC now?  Consider this new research from the CERT/CC team at Carnegie...

Want to Deploy DNSSEC on Microsoft Windows 7 or Server 2008 R2?
Deploy36016 February 2012

Want to Deploy DNSSEC on Microsoft Windows 7 or Server 2008 R2?

Do you operate a Microsoft Windows server infrastructure and would like to know how to implement DNSSEC? If so, Microsoft...

Join the conversation with Internet Society members around the world