Target Audience

Operators interested in deploying DNS SECurity as part of their security infrastructure and people with a general interest in DNSSEC, and those contemplating whether or not to deploy DNSSEC in their organization.

Pre-requisites

Basic DNS, Public key encryption and basic knowledge about UNIX System Administration

Course Outline

This tutorial covers the following topics:

• Introduction/Review of DNSSEC
• Securing zone transfer (TSIG)
• Securing a zone
• Configuring a security-aware resolver
• Delegation of signing authority
• Rolling keys
• Troubleshooting
• DPS
• DNSSEC deployment plan
• OpenDNSSEC

Technologies Covered

DNS, TSIG, DNSSEC including NSEC3