Configuring DNSSEC On BIND9 (9.7.3) On Debian Squeeze/Ubuntu 11.10

"This guide explains how you can configure DNSSEC on BIND9 (version 9.7.3 that comes with Debian Squeeze/Ubuntu 11.10) on Debian Squeeze and Ubuntu 11.10. It covers how to enable DNSSEC on authoritative nameservers (master and slave) and on resolving nameservers, creation of keys (KSKs and ZSKs), signing of zones, key rolling with rollerd, zone file checking with donuts, creation of trust anchors, using DLV (DNSSEC look-aside validation), and getting your DS records into the parent's zone."

Complete Story

Related Stories:

• What the Heck is DNSSEC?(Feb 02, 2011)
• DNSSEC is Here. Now What?(Jul 29, 2010)
• DNSSEC Moving Ahead at .Org and ICANN(Mar 15, 2010)
• OpenDNSSEC 1.0.0 released(Feb 10, 2010)
• DNSSEC Compromised Again?(Jan 22, 2010)