<html><head><meta http-equiv="Content-Type" content="text/html charset=us-ascii"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; ">Hi,<div><br></div><div>We are using BIND v9.8.2.</div><div><br></div><div>Currently, we are setting up AD infrastructure for internal/local network. We've configured one controller to be the primary for this local zone (fdu.local) for DNS queries. Our primary DNS server (which indeed is a different server) is configured to hold this as a slave. We would like configure DNSSEC and I am wondering where can we get this started from.</div><div><br></div><div>We are planning to sign local zone (fdu.local). Is it required to sign the parent zone (<a href="http://fdu.edu">fdu.edu</a>) as well or we can live with it unsigned?</div><div>What are pros and cons of signing parent zone (<a href="http://fdu.edu">fdu.edu</a>)?</div><div><br></div><div>We've found information on signing zones on AD at least. Can some one provide us steps to enable and configure DNSSEC for our domains.</div><div><br></div><div>Thanks in advance.<br><div>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
<title>OIRT Signature</title>
<style media="all" type="text/css">
#sig{
margin:6px 0 0 15px;
padding:6px;
width: 530px;
}
#sig .person{
font-family:Georgia, "Times New Roman", Times, serif;
font-size:12px;
font-style:italic;
color:#333333;
font-weight: bolder;
padding: 0 0 0 15px;
}
#sig .title{
font-family:Georgia, "Times New Roman", Times, serif;
font-size:10px;
font-style:italic;
color:#333333;
padding: 0 0 0 15px;
letter-spacing: .1em;
line-height: 10px;
}
#sig .row {
line-height:12px;
color:#333333;
padding-top: 13px;
padding: 10px 0 0 15px;
font-family: Verdana, Arial, Helvetica, sans-serif;
font-size: 10px;
}
#sig .top {
font-family:Georgia, "Times New Roman", Times, serif;
font-size:11px;
font-style:italic;
color:#CC0000;
padding:7px 0 0 0;
font-weight: bolder;
}
#sig .toptwo {
font-family:Georgia, "Times New Roman", Times, serif;
font-size:11px;
font-style:italic;
color:#CC0000;
padding-left: 120px;
font-weight: bolder;
}
#sig .row a:link, .row avisited {
color:#5CBDBF;
text-decoration:none;
}
#sig .row a:over{
color:#333333;
border: 1px black dotted;
}
</style>
<div id="sig">
<table width="100%" border="0" cellpadding="0" cellspacing="0">
<tbody><tr>
<td width="150" valign="top"><img moz-do-not-send="false" src="http://isweb.fdu.edu/images_common/small-full-fdu.gif" alt="fdu logo" width="140" height="62"></td>
<td>
<div class="person">Vishal K. Gandhi</div>
<div class="title">Systems Analyst/E-Mail Specialist<br>University Systems and Security</div>
<div class="row">
<strong>1000 River Road, Teaneck NJ 07666</strong><br>
Mail Stop: T-BH1-01<br>
<img moz-do-not-send="false" src="http://isweb.fdu.edu/images_common/phone.gif" alt="phone" width="13" height="10">: 201-692-2414 |
<img moz-do-not-send="false" src="http://isweb.fdu.edu/images_common/fax.gif" alt="fax" width="15" height="13">: 201-692-2494 |
<img moz-do-not-send="false" src="http://isweb.fdu.edu/images_common/mail.gif" alt="email" width="12" height="11">: <a href="mailto:vgandhi@fdu.edu">vgandhi@fdu.edu</a> </div> </td>
</tr>
<tr>
<td colspan="2">
<div class="top">"Fairleigh Dickinson University will never<br> ask for your password. Please do not share it with others!"</div>
</td>
</tr>
</tbody></table>
</div>
</div>
<br></div></body></html>