RE: DNSSEC for NS delegation record

Hello, (the “easiest” way) 1) The admins of sub1.testing.net. should generate ZSK and KSK. à The “parent” cannot do this for the “child” 2) You do not need the “key file*s*” of the child, in the parent. If, by using the plural form, you mean both public (.key) and private (.private)

Re: DNSSEC for NS delegation record

In message <349af545493290449749762c5f03929a0cf3bcc...@hq-mb-08.ba.ad.ssa.gov>, "Khuu, Linh Contractor" writes: > Hi, > > I have questions about how to configure the DNS with NS delegation record o= > nce it's signed. > > My DNS server is the parent zone, for example, "testing.net" and is signe