Checklist: Signing a Zone

Updated: October 7, 2009

Applies To: Windows Server 2008 R2


This topic applies to DNSSEC in Windows Server 2008 R2. DNSSEC support is greatly enhanced in Windows Server 2012. For more information, see DNSSEC in Windows Server 2012.

This checklist provides links to important procedures you can use to sign a zone file.


When a reference link takes you to a conceptual topic or to a subordinate checklist, return to this topic after you review the conceptual topic or you complete the tasks in the subordinate checklist so that you can proceed with the remaining tasks in this checklist.

Checklist: Signing a Zone

  Task Reference

Generate key pairs.

Generate Key Pairs

Back up the private keys.

Back Up Private Keys

Sign the zone file.

Sign a Zone File

Reload the signed zone file.

Reload a Zone File

See Also


When to Re-sign a Zone File
Checklist: Re-sign a Zone File
Appendix C: DNSSEC PowerShell Scripts