What does offline signing of static zone means

What does offline signing of static zone means
How to configure a Offline signing of static zones in a dns server. I need some working information on the same. Also post some details how does the dns server command line works. What can be done via it. How to does a singing tool generates keys. Then where does the keys are stored and in what form. I am not aware the full functioning of offline mode singing is static zone.
Reply With Quote
#2
Old 06-02-2010
Trio's Avatar
Trio Trio is offline
Member

Join Date: May 2008
Posts: 2,752
Re: What does offline signing of static zone means
The DNS server command-line is a administration tool (Dnscmd.exe) present or permit offline key generation and zone-signing potential through a signing tool. RSA/SHA-1 is the maintained algorithm. Maintained key lengths are from 512 bits to 4096 bits. You will necessitate to collect additional information in sequence on this. It is better suggested that you must first get the appropriate information in sequence and then play with the settings.
Reply With Quote
#3
Old 06-02-2010
deveritt's Avatar
deveritt deveritt is offline
Member

Join Date: Apr 2008
Posts: 2,528
Re: What does offline signing of static zone means
The signing tool engenders keys that will be stored in documentations, an example of which would be a self-signed document in the machine store. In order to sign a zone, you have to see the zone data from a file-backed or an Active Directory-integrated zone must be derivative to a provisional file. The zone signing tool consumes this file as the input and engenders a signed zone file as the output.
Reply With Quote
#4
Old 06-02-2010
Techguru01's Avatar
Techguru01 Techguru01 is offline
Member

Join Date: Oct 2005
Posts: 2,116
Re: What does offline signing of static zone means
The signed zone file includes the supplementary RRSIG, DNSKEY, DS, and NSEC resource verifications for data in the zone. This signed zone then you have to to reload on the DNS server in order for the server to host the zone. For the reload you can the signed zone by using Dnscmd.exe or DNS administrator. This necessitates advance configuration information in sequence on the same. I will advice you to gather additional information in sequence on the same.
__________________
I'm the Proud Owner of the most dangerous weapon
known to man kind: Human Brain
Reply With Quote
#5
Old 06-02-2010
johnson22's Avatar
johnson22 johnson22 is offline
Member

Join Date: May 2008
Posts: 2,111
Re: What does offline signing of static zone means
The zone signing tool also present or permit you for key rollover either by pre-publishing keys or by producing two sets of signatures (one for the key being retired, one for the new key). Energetic updates are mechanically put out of action on a DNSSEC-signed zone. Windows Server 2008 R2 DNS server sustain and maintain the signing of static zones only. You must use Dnscmd.exe or DNS administrator to add additional resource records to a zone and the zone must be re-signed.
Reply With Quote
#6
Old 06-02-2010
Aloke's Avatar
Aloke Aloke is offline
Member

Join Date: May 2009
Posts: 953
Re: What does offline signing of static zone means
One thing is very significant here. Protected energetic update is a characteristic established in Windows Server 2003 that is used by DNS clients to schedule and energetically update their resource records with a DNS server whenever modification occur. This characteristic should not be mystified with DNSSEC. After a zone is DNSSEC-signed, all mechanisms of energetic updates (secure and non-secure) will be disabled on that zone.