Showing posts with label Pre-published rollover of zone signing keys. Show all posts
Showing posts with label Pre-published rollover of zone signing keys. Show all posts

2010/08/23

Pre-published rollover of zone signing keys

I have turned to the use of pre-published rollover of zone signing key in order to manage DNSSEC in one of my administered zones. I need to draw a diagram to remind about the timing sequences and what keys to sign and publish. Here it is.










The above process must be done by cron job and shell script for automation.