DNSSEC key renew time policy

Eduardo Bonsi beartcom at pacbell.net
Tue Dec 27 21:16:15 UTC 2011


The DLV registry has detected problems with one or more of your zones.
Below is a summary of the errors detected.  For full details, please
log into the DLV registry.

     https://dlv.isc.org/

Zones for username: myusername


Signature Expired

domain.org

You will only get this message if any of your zones have problems.

I just received this message and I am wondering how much time should I 
put in the automatic renew for my DNSSEC key. Right now I have it set to 
21 days but that is not working as it has expired before time.

Thanks!

-- 
BEARTCOMMUNICATIONS
Eduardo Bonsi
System - Network Admin
beartcom at pacbell.net
webmaster at beart.com



More information about the bind-users mailing list