---
title: "Chapter 22 DNSSEC"
canonical: "https://docs.infoblox.com/space/NAG8/22252220/Chapter%2022%20DNSSEC"
format: markdown
---
This chapter provides general information about DNSSEC. The topics in this chapter include:

- *<span style="color: #0000ff">[About](#Chapter22DNSSEC-bookmark2015)</span>*[ ](#Chapter22DNSSEC-bookmark2015)*<span style="color: #0000ff">[DNSSEC](#Chapter22DNSSEC-bookmark2015)</span>*[ ](#Chapter22DNSSEC-bookmark2015)
  - *<span style="color: #0000ff">[DNSSEC](#Chapter22DNSSEC-bookmark2018)</span>*[ ](#Chapter22DNSSEC-bookmark2018)*<span style="color: #0000ff">[Resource](#Chapter22DNSSEC-bookmark2018)</span>*[ ](#Chapter22DNSSEC-bookmark2018)*<span style="color: #0000ff">[Records](#Chapter22DNSSEC-bookmark2018)</span>*[ ](#Chapter22DNSSEC-bookmark2018)
  - *<span style="color: #0000ff">[DNSKEY](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252224)</span>*[ ](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252224)*<span style="color: #0000ff">[Resource](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252224)</span>*[ ](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252224)*<span style="color: #0000ff">[Records](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252224)</span>*[ ](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252224)
  - *<span style="color: #0000ff">[RRSIG](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252229)</span>*[ ](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252229)*<span style="color: #0000ff">[Resource](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252229)</span>*[ ](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252229)*<span style="color: #0000ff">[Records](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252229)</span>*[ ](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252229)
  - *<span style="color: #0000ff">[NSEC/NSEC3](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252203)</span>*[ ](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252203)*<span style="color: #0000ff">[Resource](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252203)</span>*[ ](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252203)*<span style="color: #0000ff">[Records](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252203)</span>*[ ](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252203)
  - *<span style="color: #0000ff">[NSEC3PARAM](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252207)</span>*[ ](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252207)*<span style="color: #0000ff">[Resource](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252207)</span>*[ ](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252207)*<span style="color: #0000ff">[Records](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252207)</span>*[ ](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252207)
  - *<span style="color: #0000ff">[DS](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252211)</span>*[ ](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252211)*<span style="color: #0000ff">[Resource](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252211)</span>*[ ](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252211)*<span style="color: #0000ff">[Records](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252211)</span>*[ ](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252211)
- *<span style="color: #0000ff">[Configuring](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252198)</span>*[ ](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252198)*<span style="color: #0000ff">[DNSSEC](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252198)</span>*[ ](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252198)*<span style="color: #0000ff">[on](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252198)</span>*[ ](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252198)*<span style="color: #0000ff">[a](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252198)</span>*[ ](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252198)*<span style="color: #0000ff">[Grid](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252198)</span>*[ ](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252198)
  - *<span style="color: #0000ff">[Grid](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252198/Configuring+DNSSEC+on+a+Grid#ConfiguringDNSSEConaGrid-bookmark2033)</span>*[ ](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252198/Configuring+DNSSEC+on+a+Grid#ConfiguringDNSSEConaGrid-bookmark2033)*<span style="color: #0000ff">[Master](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252198/Configuring+DNSSEC+on+a+Grid#ConfiguringDNSSEConaGrid-bookmark2033)</span>*[ ](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252198/Configuring+DNSSEC+on+a+Grid#ConfiguringDNSSEConaGrid-bookmark2033)*<span style="color: #0000ff">[as](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252198/Configuring+DNSSEC+on+a+Grid#ConfiguringDNSSEConaGrid-bookmark2033)</span>*[ ](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252198/Configuring+DNSSEC+on+a+Grid#ConfiguringDNSSEConaGrid-bookmark2033)*<span style="color: #0000ff">[Primary](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252198/Configuring+DNSSEC+on+a+Grid#ConfiguringDNSSEConaGrid-bookmark2033)</span>*[ ](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252198/Configuring+DNSSEC+on+a+Grid#ConfiguringDNSSEConaGrid-bookmark2033)*<span style="color: #0000ff">[Server](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252198/Configuring+DNSSEC+on+a+Grid#ConfiguringDNSSEConaGrid-bookmark2033)</span>*[ ](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252198/Configuring+DNSSEC+on+a+Grid#ConfiguringDNSSEConaGrid-bookmark2033)
- *<span style="color: #0000ff">[Enabling](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252193)</span>*[ ](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252193)*<span style="color: #0000ff">[DNSSEC](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252193)</span>*[ ](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252193)
- *<span style="color: #0000ff">[Setting](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252178)</span>*[ ](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252178)*<span style="color: #0000ff">[DNSSEC](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252178)</span>*[ ](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252178)*<span style="color: #0000ff">[Parameters](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252178)</span>*[ ](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252178)
  - *<span style="color: #0000ff">[About](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252178/Setting+DNSSEC+Parameters#SettingDNSSECParameters-bookmark2037)</span>*[ ](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252178/Setting+DNSSEC+Parameters#SettingDNSSECParameters-bookmark2037)*<span style="color: #0000ff">[the](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252178/Setting+DNSSEC+Parameters#SettingDNSSECParameters-bookmark2037)</span>*[ ](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252178/Setting+DNSSEC+Parameters#SettingDNSSECParameters-bookmark2037)*<span style="color: #0000ff">[DNSKEY](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252178/Setting+DNSSEC+Parameters#SettingDNSSECParameters-bookmark2037)</span>*[ ](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252178/Setting+DNSSEC+Parameters#SettingDNSSECParameters-bookmark2037)*<span style="color: #0000ff">[Algorithm](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252178/Setting+DNSSEC+Parameters#SettingDNSSECParameters-bookmark2037)</span>*[ ](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252178/Setting+DNSSEC+Parameters#SettingDNSSECParameters-bookmark2037)
  - *<span style="color: #0000ff">[About](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252178/Setting+DNSSEC+Parameters#SettingDNSSECParameters-bookmark2038)</span>*[ ](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252178/Setting+DNSSEC+Parameters#SettingDNSSECParameters-bookmark2038)*<span style="color: #0000ff">[Key](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252178/Setting+DNSSEC+Parameters#SettingDNSSECParameters-bookmark2038)</span>*[ ](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252178/Setting+DNSSEC+Parameters#SettingDNSSECParameters-bookmark2038)*<span style="color: #0000ff">[Rollovers](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252178/Setting+DNSSEC+Parameters#SettingDNSSECParameters-bookmark2038)</span>*[ ](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252178/Setting+DNSSEC+Parameters#SettingDNSSECParameters-bookmark2038)
  - *<span style="color: #0000ff">[RRSIG](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252178/Setting+DNSSEC+Parameters#SettingDNSSECParameters-bookmark2041)</span>*[ ](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252178/Setting+DNSSEC+Parameters#SettingDNSSECParameters-bookmark2041)*<span style="color: #0000ff">[Signatures](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252178/Setting+DNSSEC+Parameters#SettingDNSSECParameters-bookmark2041)</span>*[ ](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252178/Setting+DNSSEC+Parameters#SettingDNSSECParameters-bookmark2041)
  - *<span style="color: #0000ff">[Configuring](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252178/Setting+DNSSEC+Parameters#SettingDNSSECParameters-bookmark2042)</span>*[ ](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252178/Setting+DNSSEC+Parameters#SettingDNSSECParameters-bookmark2042)*<span style="color: #0000ff">[DNSSEC](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252178/Setting+DNSSEC+Parameters#SettingDNSSECParameters-bookmark2042)</span>*[ ](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252178/Setting+DNSSEC+Parameters#SettingDNSSECParameters-bookmark2042)*<span style="color: #0000ff">[Parameters](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252178/Setting+DNSSEC+Parameters#SettingDNSSECParameters-bookmark2042)</span>*[ ](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252178/Setting+DNSSEC+Parameters#SettingDNSSECParameters-bookmark2042)
  - *<span style="color: #0000ff">[Applying](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252178/Setting+DNSSEC+Parameters#SettingDNSSECParameters-bookmark2043)</span>*[ ](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252178/Setting+DNSSEC+Parameters#SettingDNSSECParameters-bookmark2043)*<span style="color: #0000ff">[the](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252178/Setting+DNSSEC+Parameters#SettingDNSSECParameters-bookmark2043)</span>*[ ](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252178/Setting+DNSSEC+Parameters#SettingDNSSECParameters-bookmark2043)*<span style="color: #0000ff">[Algorithm](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252178/Setting+DNSSEC+Parameters#SettingDNSSECParameters-bookmark2043)</span>*[ ](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252178/Setting+DNSSEC+Parameters#SettingDNSSECParameters-bookmark2043)*<span style="color: #0000ff">[Changes](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252178/Setting+DNSSEC+Parameters#SettingDNSSECParameters-bookmark2043)</span>*[ ](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252178/Setting+DNSSEC+Parameters#SettingDNSSECParameters-bookmark2043)
  - *<span style="color: #0000ff">[Deleting](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252178/Setting+DNSSEC+Parameters#SettingDNSSECParameters-bookmark2044)</span>*[ ](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252178/Setting+DNSSEC+Parameters#SettingDNSSECParameters-bookmark2044)*<span style="color: #0000ff">[the](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252178/Setting+DNSSEC+Parameters#SettingDNSSECParameters-bookmark2044)</span>*[ ](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252178/Setting+DNSSEC+Parameters#SettingDNSSECParameters-bookmark2044)*<span style="color: #0000ff">[DNSSEC](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252178/Setting+DNSSEC+Parameters#SettingDNSSECParameters-bookmark2044)</span>*[ ](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252178/Setting+DNSSEC+Parameters#SettingDNSSECParameters-bookmark2044)*<span style="color: #0000ff">[Keys](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252178/Setting+DNSSEC+Parameters#SettingDNSSECParameters-bookmark2044)</span>*[ ](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252178/Setting+DNSSEC+Parameters#SettingDNSSECParameters-bookmark2044)*<span style="color: #0000ff">[Associated](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252178/Setting+DNSSEC+Parameters#SettingDNSSECParameters-bookmark2044)</span>*[ ](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252178/Setting+DNSSEC+Parameters#SettingDNSSECParameters-bookmark2044)*<span style="color: #0000ff">[with](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252178/Setting+DNSSEC+Parameters#SettingDNSSECParameters-bookmark2044)</span>*[ ](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252178/Setting+DNSSEC+Parameters#SettingDNSSECParameters-bookmark2044)*<span style="color: #0000ff">[a](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252178/Setting+DNSSEC+Parameters#SettingDNSSECParameters-bookmark2044)</span>*[ ](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252178/Setting+DNSSEC+Parameters#SettingDNSSECParameters-bookmark2044)*<span style="color: #0000ff">[Zone](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252178/Setting+DNSSEC+Parameters#SettingDNSSECParameters-bookmark2044)</span>*[ ](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252178/Setting+DNSSEC+Parameters#SettingDNSSECParameters-bookmark2044)
- *<span style="color: #0000ff">[Signing](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252182)</span>*[ ](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252182)*<span style="color: #0000ff">[a](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252182)</span>*[ ](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252182)*<span style="color: #0000ff">[Zone](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252182)</span>*[ ](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252182)
  - *<span style="color: #0000ff">[Managing](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252182/Signing+a+Zone#SigningaZone-bookmark2049)</span>*[ ](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252182/Signing+a+Zone#SigningaZone-bookmark2049)*<span style="color: #0000ff">[Signed](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252182/Signing+a+Zone#SigningaZone-bookmark2049)</span>*[ ](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252182/Signing+a+Zone#SigningaZone-bookmark2049)*<span style="color: #0000ff">[Zones](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252182/Signing+a+Zone#SigningaZone-bookmark2049)</span>*[ ](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252182/Signing+a+Zone#SigningaZone-bookmark2049)
  - *<span style="color: #0000ff">[Importing](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252182/Signing+a+Zone#SigningaZone-bookmark2050)</span>*[ ](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252182/Signing+a+Zone#SigningaZone-bookmark2050)*<span style="color: #0000ff">[a](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252182/Signing+a+Zone#SigningaZone-bookmark2050)</span>*[ ](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252182/Signing+a+Zone#SigningaZone-bookmark2050)*<span style="color: #0000ff">[Keyset](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252182/Signing+a+Zone#SigningaZone-bookmark2050)</span>*[ ](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252182/Signing+a+Zone#SigningaZone-bookmark2050)
  - *<span style="color: #0000ff">[Exporting](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252182/Signing+a+Zone#SigningaZone-bookmark2051)</span>*[ ](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252182/Signing+a+Zone#SigningaZone-bookmark2051)*<span style="color: #0000ff">[Trust](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252182/Signing+a+Zone#SigningaZone-bookmark2051)</span>*[ ](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252182/Signing+a+Zone#SigningaZone-bookmark2051)*<span style="color: #0000ff">[Anchors](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252182/Signing+a+Zone#SigningaZone-bookmark2051)</span>*[ ](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252182/Signing+a+Zone#SigningaZone-bookmark2051)
  - *<span style="color: #0000ff">[Checking](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252182/Signing+a+Zone#SigningaZone-bookmark2052)</span>*[ ](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252182/Signing+a+Zone#SigningaZone-bookmark2052)*<span style="color: #0000ff">[Key-Signing](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252182/Signing+a+Zone#SigningaZone-bookmark2052)</span>*[ ](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252182/Signing+a+Zone#SigningaZone-bookmark2052)*<span style="color: #0000ff">[Keys](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252182/Signing+a+Zone#SigningaZone-bookmark2052)</span>*[ ](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252182/Signing+a+Zone#SigningaZone-bookmark2052)
  - *<span style="color: #0000ff">[Rolling](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252182/Signing+a+Zone#SigningaZone-bookmark2053)</span>*[ ](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252182/Signing+a+Zone#SigningaZone-bookmark2053)*<span style="color: #0000ff">[Key-Signing](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252182/Signing+a+Zone#SigningaZone-bookmark2053)</span>*[ ](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252182/Signing+a+Zone#SigningaZone-bookmark2053)*<span style="color: #0000ff">[Keys](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252182/Signing+a+Zone#SigningaZone-bookmark2053)</span>*[ ](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252182/Signing+a+Zone#SigningaZone-bookmark2053)
  - *<span style="color: #0000ff">[Rolling](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252182/Signing+a+Zone#SigningaZone-bookmark2054)</span>*[ ](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252182/Signing+a+Zone#SigningaZone-bookmark2054)*<span style="color: #0000ff">[Zone-Signing](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252182/Signing+a+Zone#SigningaZone-bookmark2054)</span>*[ ](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252182/Signing+a+Zone#SigningaZone-bookmark2054)*<span style="color: #0000ff">[Keys](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252182/Signing+a+Zone#SigningaZone-bookmark2054)</span>*[ ](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252182/Signing+a+Zone#SigningaZone-bookmark2054)
  - *<span style="color: #0000ff">[Best](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252182/Signing+a+Zone#SigningaZone-bookmark2055)</span>*[ ](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252182/Signing+a+Zone#SigningaZone-bookmark2055)*<span style="color: #0000ff">[Practices](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252182/Signing+a+Zone#SigningaZone-bookmark2055)</span>*[ ](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252182/Signing+a+Zone#SigningaZone-bookmark2055)*<span style="color: #0000ff">[for](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252182/Signing+a+Zone#SigningaZone-bookmark2055)</span>*[ ](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252182/Signing+a+Zone#SigningaZone-bookmark2055)*<span style="color: #0000ff">[Configuring](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252182/Signing+a+Zone#SigningaZone-bookmark2055)</span>*[ ](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252182/Signing+a+Zone#SigningaZone-bookmark2055)*<span style="color: #0000ff">[Zone](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252182/Signing+a+Zone#SigningaZone-bookmark2055)</span>*[ ](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252182/Signing+a+Zone#SigningaZone-bookmark2055)*<span style="color: #0000ff">[Signing](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252182/Signing+a+Zone#SigningaZone-bookmark2055)</span>*[ ](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252182/Signing+a+Zone#SigningaZone-bookmark2055)*<span style="color: #0000ff">[Keys](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252182/Signing+a+Zone#SigningaZone-bookmark2055)</span>*[ ](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252182/Signing+a+Zone#SigningaZone-bookmark2055)
  - *<span style="color: #0000ff">[Unsigning](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252182/Signing+a+Zone#SigningaZone-bookmark2056)</span>*[ ](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252182/Signing+a+Zone#SigningaZone-bookmark2056)*<span style="color: #0000ff">[a](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252182/Signing+a+Zone#SigningaZone-bookmark2056)</span>*[ ](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252182/Signing+a+Zone#SigningaZone-bookmark2056)*<span style="color: #0000ff">[Zone](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252182/Signing+a+Zone#SigningaZone-bookmark2056)</span>*[ ](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252182/Signing+a+Zone#SigningaZone-bookmark2056)
  - *<span style="color: #0000ff">[Deleting](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252182/Signing+a+Zone#SigningaZone-bookmark2057)</span>*[ ](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252182/Signing+a+Zone#SigningaZone-bookmark2057)*<span style="color: #0000ff">[and](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252182/Signing+a+Zone#SigningaZone-bookmark2057)</span>*[ ](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252182/Signing+a+Zone#SigningaZone-bookmark2057)*<span style="color: #0000ff">[Restoring](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252182/Signing+a+Zone#SigningaZone-bookmark2057)</span>*[ ](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252182/Signing+a+Zone#SigningaZone-bookmark2057)*<span style="color: #0000ff">[Signed](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252182/Signing+a+Zone#SigningaZone-bookmark2057)</span>*[ ](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252182/Signing+a+Zone#SigningaZone-bookmark2057)*<span style="color: #0000ff">[Zones](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252182/Signing+a+Zone#SigningaZone-bookmark2057)</span>*[ ](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252182/Signing+a+Zone#SigningaZone-bookmark2057)
  - *<span style="color: #0000ff">[Configuring](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252182/Signing+a+Zone#SigningaZone-bookmark2058)</span>*[ ](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252182/Signing+a+Zone#SigningaZone-bookmark2058)*<span style="color: #0000ff">[Automatic](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252182/Signing+a+Zone#SigningaZone-bookmark2058)</span>*[ ](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252182/Signing+a+Zone#SigningaZone-bookmark2058)*<span style="color: #0000ff">[KSK](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252182/Signing+a+Zone#SigningaZone-bookmark2058)</span>*[ ](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252182/Signing+a+Zone#SigningaZone-bookmark2058)*<span style="color: #0000ff">[Rollovers](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252182/Signing+a+Zone#SigningaZone-bookmark2058)</span>*[ ](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252182/Signing+a+Zone#SigningaZone-bookmark2058)*<span style="color: #0000ff">[and](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252182/Signing+a+Zone#SigningaZone-bookmark2058)</span>*[ ](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252182/Signing+a+Zone#SigningaZone-bookmark2058)*<span style="color: #0000ff">[Notifications](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252182/Signing+a+Zone#SigningaZone-bookmark2058)</span>*[ ](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252182/Signing+a+Zone#SigningaZone-bookmark2058)
  - *<span style="color: #0000ff">[Configuring](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252182/Signing+a+Zone#SigningaZone-bookmark2060)</span>*[ ](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252182/Signing+a+Zone#SigningaZone-bookmark2060)*<span style="color: #0000ff">[NSEC3](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252182/Signing+a+Zone#SigningaZone-bookmark2060)</span>*[ ](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252182/Signing+a+Zone#SigningaZone-bookmark2060)*<span style="color: #0000ff">[Salt](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252182/Signing+a+Zone#SigningaZone-bookmark2060)</span>*[ ](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252182/Signing+a+Zone#SigningaZone-bookmark2060)*<span style="color: #0000ff">[Length](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252182/Signing+a+Zone#SigningaZone-bookmark2060)</span>*[ ](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252182/Signing+a+Zone#SigningaZone-bookmark2060)*<span style="color: #0000ff">[and](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252182/Signing+a+Zone#SigningaZone-bookmark2060)</span>*[ ](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252182/Signing+a+Zone#SigningaZone-bookmark2060)*<span style="color: #0000ff">[Hashing](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252182/Signing+a+Zone#SigningaZone-bookmark2060)</span>*[ ](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252182/Signing+a+Zone#SigningaZone-bookmark2060)*<span style="color: #0000ff">[Iterations](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252182/Signing+a+Zone#SigningaZone-bookmark2060)</span>*[ ](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252182/Signing+a+Zone#SigningaZone-bookmark2060)
  - *<span style="color: #0000ff">[Deleting](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252182/Signing+a+Zone#SigningaZone-bookmark2061)</span>*[ ](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252182/Signing+a+Zone#SigningaZone-bookmark2061)*<span style="color: #0000ff">[Server](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252182/Signing+a+Zone#SigningaZone-bookmark2061)</span>*[ ](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252182/Signing+a+Zone#SigningaZone-bookmark2061)*<span style="color: #0000ff">[Keys](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252182/Signing+a+Zone#SigningaZone-bookmark2061)</span>*[ ](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252182/Signing+a+Zone#SigningaZone-bookmark2061)
  - *<span style="color: #0000ff">[Configuring](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252182/Signing+a+Zone#SigningaZone-bookmark2062)</span>*[ ](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252182/Signing+a+Zone#SigningaZone-bookmark2062)*<span style="color: #0000ff">[Emergency](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252182/Signing+a+Zone#SigningaZone-bookmark2062)</span>*[ ](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252182/Signing+a+Zone#SigningaZone-bookmark2062)*<span style="color: #0000ff">[KSK](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252182/Signing+a+Zone#SigningaZone-bookmark2062)</span>*[ ](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252182/Signing+a+Zone#SigningaZone-bookmark2062)*<span style="color: #0000ff">[Rollover](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252182/Signing+a+Zone#SigningaZone-bookmark2062)</span>*[ ](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252182/Signing+a+Zone#SigningaZone-bookmark2062)
  - *<span style="color: #0000ff">[Viewing](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252182/Signing+a+Zone#SigningaZone-bookmark2063)</span>*[ ](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252182/Signing+a+Zone#SigningaZone-bookmark2063)*<span style="color: #0000ff">[Scheduled](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252182/Signing+a+Zone#SigningaZone-bookmark2063)</span>*[ ](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252182/Signing+a+Zone#SigningaZone-bookmark2063)*<span style="color: #0000ff">[Tasks](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252182/Signing+a+Zone#SigningaZone-bookmark2063)</span>*[ ](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252182/Signing+a+Zone#SigningaZone-bookmark2063)
- *<span style="color: #0000ff">[About](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252187)</span>*[ ](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252187)*<span style="color: #0000ff">[HSM](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252187)</span>*[ ](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252187)*<span style="color: #0000ff">[Signing](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252187)</span>*[ ](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252187)
  - *<span style="color: #0000ff">[Configuring](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252187/About+HSM+Signing#AboutHSMSigning-bookmark2067)</span>*[ ](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252187/About+HSM+Signing#AboutHSMSigning-bookmark2067)*<span style="color: #0000ff">[a](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252187/About+HSM+Signing#AboutHSMSigning-bookmark2067)</span>*[ ](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252187/About+HSM+Signing#AboutHSMSigning-bookmark2067)*<span style="color: #0000ff">[SafeNet](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252187/About+HSM+Signing#AboutHSMSigning-bookmark2067)</span>*[ ](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252187/About+HSM+Signing#AboutHSMSigning-bookmark2067)*<span style="color: #0000ff">[HSM](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252187/About+HSM+Signing#AboutHSMSigning-bookmark2067)</span>*[ ](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252187/About+HSM+Signing#AboutHSMSigning-bookmark2067)*<span style="color: #0000ff">[Device](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252187/About+HSM+Signing#AboutHSMSigning-bookmark2067)</span>*[ ](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252187/About+HSM+Signing#AboutHSMSigning-bookmark2067)
  - *<span style="color: #0000ff">[Adding](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252187/About+HSM+Signing#AboutHSMSigning-bookmark2071)</span>*[ ](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252187/About+HSM+Signing#AboutHSMSigning-bookmark2071)*<span style="color: #0000ff">[and](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252187/About+HSM+Signing#AboutHSMSigning-bookmark2071)</span>*[ ](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252187/About+HSM+Signing#AboutHSMSigning-bookmark2071)*<span style="color: #0000ff">[Managing](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252187/About+HSM+Signing#AboutHSMSigning-bookmark2071)</span>*[ ](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252187/About+HSM+Signing#AboutHSMSigning-bookmark2071)*<span style="color: #0000ff">[a](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252187/About+HSM+Signing#AboutHSMSigning-bookmark2071)</span>*[ ](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252187/About+HSM+Signing#AboutHSMSigning-bookmark2071)*<span style="color: #0000ff">[Thales](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252187/About+HSM+Signing#AboutHSMSigning-bookmark2071)</span>*[ ](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252187/About+HSM+Signing#AboutHSMSigning-bookmark2071)*<span style="color: #0000ff">[HSM](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252187/About+HSM+Signing#AboutHSMSigning-bookmark2071)</span>*[ ](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252187/About+HSM+Signing#AboutHSMSigning-bookmark2071)*<span style="color: #0000ff">[Group](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252187/About+HSM+Signing#AboutHSMSigning-bookmark2071)</span>*[ ](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252187/About+HSM+Signing#AboutHSMSigning-bookmark2071)
  - *<span style="color: #0000ff">[Synchronizing](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252187/About+HSM+Signing#AboutHSMSigning-bookmark2075)</span>*[ ](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252187/About+HSM+Signing#AboutHSMSigning-bookmark2075)*<span style="color: #0000ff">[the](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252187/About+HSM+Signing#AboutHSMSigning-bookmark2075)</span>*[ ](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252187/About+HSM+Signing#AboutHSMSigning-bookmark2075)*<span style="color: #0000ff">[HSM](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252187/About+HSM+Signing#AboutHSMSigning-bookmark2075)</span>*[ ](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252187/About+HSM+Signing#AboutHSMSigning-bookmark2075)*<span style="color: #0000ff">[Group](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252187/About+HSM+Signing#AboutHSMSigning-bookmark2075)</span>*[ ](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252187/About+HSM+Signing#AboutHSMSigning-bookmark2075)
  - *<span style="color: #0000ff">[Monitoring](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252187/About+HSM+Signing#AboutHSMSigning-bookmark2072)</span>*[ ](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252187/About+HSM+Signing#AboutHSMSigning-bookmark2072)*<span style="color: #0000ff">[the](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252187/About+HSM+Signing#AboutHSMSigning-bookmark2072)</span>*[ ](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252187/About+HSM+Signing#AboutHSMSigning-bookmark2072)*<span style="color: #0000ff">[HSM](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252187/About+HSM+Signing#AboutHSMSigning-bookmark2072)</span>*[ ](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252187/About+HSM+Signing#AboutHSMSigning-bookmark2072)*<span style="color: #0000ff">[Group](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252187/About+HSM+Signing#AboutHSMSigning-bookmark2072)</span>*[ ](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252187/About+HSM+Signing#AboutHSMSigning-bookmark2072)
  - *<span style="color: #0000ff">[Enabling](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252187/About+HSM+Signing#AboutHSMSigning-bookmark2073)</span>*[ ](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252187/About+HSM+Signing#AboutHSMSigning-bookmark2073)*<span style="color: #0000ff">[HSM](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252187/About+HSM+Signing#AboutHSMSigning-bookmark2073)</span>*[ ](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252187/About+HSM+Signing#AboutHSMSigning-bookmark2073)*<span style="color: #0000ff">[Signing](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252187/About+HSM+Signing#AboutHSMSigning-bookmark2073)</span>*[ ](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252187/About+HSM+Signing#AboutHSMSigning-bookmark2073)
- *<span style="color: #0000ff">[Configuring](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252166)</span>*[ ](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252166)*<span style="color: #0000ff">[Grid](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252166)</span>*[ ](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252166)*<span style="color: #0000ff">[Members](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252166)</span>*[ ](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252166)*<span style="color: #0000ff">[to](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252166)</span>*[ ](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252166)*<span style="color: #0000ff">[Support](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252166)</span>*[ ](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252166)*<span style="color: #0000ff">[DNSSEC](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252166)</span>*[ ](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252166)*<span style="color: #0000ff">[as](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252166)</span>*[ ](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252166)*<span style="color: #0000ff">[Secondary](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252166)</span>*[ ](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252166)*<span style="color: #0000ff">[Servers](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252166)</span>*[ ](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252166)
  - *<span style="color: #0000ff">[Configuring](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252166/Configuring+Grid+Members+to+Support+DNSSEC+as+Secondary+Servers#ConfiguringGridMemberstoSupportDNSSECasSecondaryServers-bookmark2077)</span>*[ ](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252166/Configuring+Grid+Members+to+Support+DNSSEC+as+Secondary+Servers#ConfiguringGridMemberstoSupportDNSSECasSecondaryServers-bookmark2077)*<span style="color: #0000ff">[a](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252166/Configuring+Grid+Members+to+Support+DNSSEC+as+Secondary+Servers#ConfiguringGridMemberstoSupportDNSSECasSecondaryServers-bookmark2077)</span>*[ ](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252166/Configuring+Grid+Members+to+Support+DNSSEC+as+Secondary+Servers#ConfiguringGridMemberstoSupportDNSSECasSecondaryServers-bookmark2077)*<span style="color: #0000ff">[Secondary](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252166/Configuring+Grid+Members+to+Support+DNSSEC+as+Secondary+Servers#ConfiguringGridMemberstoSupportDNSSECasSecondaryServers-bookmark2077)</span>*[ ](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252166/Configuring+Grid+Members+to+Support+DNSSEC+as+Secondary+Servers#ConfiguringGridMemberstoSupportDNSSECasSecondaryServers-bookmark2077)*<span style="color: #0000ff">[Server](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252166/Configuring+Grid+Members+to+Support+DNSSEC+as+Secondary+Servers#ConfiguringGridMemberstoSupportDNSSECasSecondaryServers-bookmark2077)</span>*[ ](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252166/Configuring+Grid+Members+to+Support+DNSSEC+as+Secondary+Servers#ConfiguringGridMemberstoSupportDNSSECasSecondaryServers-bookmark2077)*<span style="color: #0000ff">[for](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252166/Configuring+Grid+Members+to+Support+DNSSEC+as+Secondary+Servers#ConfiguringGridMemberstoSupportDNSSECasSecondaryServers-bookmark2077)</span>*[ ](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252166/Configuring+Grid+Members+to+Support+DNSSEC+as+Secondary+Servers#ConfiguringGridMemberstoSupportDNSSECasSecondaryServers-bookmark2077)*<span style="color: #0000ff">[Signed](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252166/Configuring+Grid+Members+to+Support+DNSSEC+as+Secondary+Servers#ConfiguringGridMemberstoSupportDNSSECasSecondaryServers-bookmark2077)</span>*[ ](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252166/Configuring+Grid+Members+to+Support+DNSSEC+as+Secondary+Servers#ConfiguringGridMemberstoSupportDNSSECasSecondaryServers-bookmark2077)*<span style="color: #0000ff">[Zones](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252166/Configuring+Grid+Members+to+Support+DNSSEC+as+Secondary+Servers#ConfiguringGridMemberstoSupportDNSSECasSecondaryServers-bookmark2077)</span>*[ ](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252166/Configuring+Grid+Members+to+Support+DNSSEC+as+Secondary+Servers#ConfiguringGridMemberstoSupportDNSSECasSecondaryServers-bookmark2077)
- *<span style="color: #0000ff">[Enabling](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252170/Configuring+Recursion+and+Validation+for+Signed+Zones#ConfiguringRecursionandValidationforSignedZones-bookmark2081)</span>*[ ](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252170/Configuring+Recursion+and+Validation+for+Signed+Zones#ConfiguringRecursionandValidationforSignedZones-bookmark2081)*<span style="color: #0000ff">[Recursion](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252170/Configuring+Recursion+and+Validation+for+Signed+Zones#ConfiguringRecursionandValidationforSignedZones-bookmark2081)</span>*[ ](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252170/Configuring+Recursion+and+Validation+for+Signed+Zones#ConfiguringRecursionandValidationforSignedZones-bookmark2081)*<span style="color: #0000ff">[and](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252170/Configuring+Recursion+and+Validation+for+Signed+Zones#ConfiguringRecursionandValidationforSignedZones-bookmark2081)</span>*[ ](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252170/Configuring+Recursion+and+Validation+for+Signed+Zones#ConfiguringRecursionandValidationforSignedZones-bookmark2081)*<span style="color: #0000ff">[Validation](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252170/Configuring+Recursion+and+Validation+for+Signed+Zones#ConfiguringRecursionandValidationforSignedZones-bookmark2081)</span>*[ ](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252170/Configuring+Recursion+and+Validation+for+Signed+Zones#ConfiguringRecursionandValidationforSignedZones-bookmark2081)*<span style="color: #0000ff">[for](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252170/Configuring+Recursion+and+Validation+for+Signed+Zones#ConfiguringRecursionandValidationforSignedZones-bookmark2081)</span>*[ ](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252170/Configuring+Recursion+and+Validation+for+Signed+Zones#ConfiguringRecursionandValidationforSignedZones-bookmark2081)*<span style="color: #0000ff">[Signed](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252170/Configuring+Recursion+and+Validation+for+Signed+Zones#ConfiguringRecursionandValidationforSignedZones-bookmark2081)</span>*[ ](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252170/Configuring+Recursion+and+Validation+for+Signed+Zones#ConfiguringRecursionandValidationforSignedZones-bookmark2081)*<span style="color: #0000ff">[Zones](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252170/Configuring+Recursion+and+Validation+for+Signed+Zones#ConfiguringRecursionandValidationforSignedZones-bookmark2081)</span>*[ ](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252170/Configuring+Recursion+and+Validation+for+Signed+Zones#ConfiguringRecursionandValidationforSignedZones-bookmark2081)
  - *<span style="color: #0000ff">[Enabling](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252170/Configuring+Recursion+and+Validation+for+Signed+Zones#ConfiguringRecursionandValidationforSignedZones-bookmark2081)</span>*[ ](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252170/Configuring+Recursion+and+Validation+for+Signed+Zones#ConfiguringRecursionandValidationforSignedZones-bookmark2081)*<span style="color: #0000ff">[Recursion](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252170/Configuring+Recursion+and+Validation+for+Signed+Zones#ConfiguringRecursionandValidationforSignedZones-bookmark2081)</span>*[ ](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252170/Configuring+Recursion+and+Validation+for+Signed+Zones#ConfiguringRecursionandValidationforSignedZones-bookmark2081)*<span style="color: #0000ff">[and](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252170/Configuring+Recursion+and+Validation+for+Signed+Zones#ConfiguringRecursionandValidationforSignedZones-bookmark2081)</span>*[ ](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252170/Configuring+Recursion+and+Validation+for+Signed+Zones#ConfiguringRecursionandValidationforSignedZones-bookmark2081)*<span style="color: #0000ff">[Validation](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252170/Configuring+Recursion+and+Validation+for+Signed+Zones#ConfiguringRecursionandValidationforSignedZones-bookmark2081)</span>*[ ](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252170/Configuring+Recursion+and+Validation+for+Signed+Zones#ConfiguringRecursionandValidationforSignedZones-bookmark2081)*<span style="color: #0000ff">[for](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252170/Configuring+Recursion+and+Validation+for+Signed+Zones#ConfiguringRecursionandValidationforSignedZones-bookmark2081)</span>*[ ](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252170/Configuring+Recursion+and+Validation+for+Signed+Zones#ConfiguringRecursionandValidationforSignedZones-bookmark2081)*<span style="color: #0000ff">[Signed](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252170/Configuring+Recursion+and+Validation+for+Signed+Zones#ConfiguringRecursionandValidationforSignedZones-bookmark2081)</span>*[ ](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252170/Configuring+Recursion+and+Validation+for+Signed+Zones#ConfiguringRecursionandValidationforSignedZones-bookmark2081)*<span style="color: #0000ff">[Zones](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252170/Configuring+Recursion+and+Validation+for+Signed+Zones#ConfiguringRecursionandValidationforSignedZones-bookmark2081)</span>*[ ](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252170/Configuring+Recursion+and+Validation+for+Signed+Zones#ConfiguringRecursionandValidationforSignedZones-bookmark2081)
  - *<span style="color: #0000ff">[Enabling](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252170/Configuring+Recursion+and+Validation+for+Signed+Zones#ConfiguringRecursionandValidationforSignedZones-bookmark2082)</span>*[ ](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252170/Configuring+Recursion+and+Validation+for+Signed+Zones#ConfiguringRecursionandValidationforSignedZones-bookmark2082)*<span style="color: #0000ff">[DNSSEC](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252170/Configuring+Recursion+and+Validation+for+Signed+Zones#ConfiguringRecursionandValidationforSignedZones-bookmark2082)</span>*[ ](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252170/Configuring+Recursion+and+Validation+for+Signed+Zones#ConfiguringRecursionandValidationforSignedZones-bookmark2082)*<span style="color: #0000ff">[Validation](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252170/Configuring+Recursion+and+Validation+for+Signed+Zones#ConfiguringRecursionandValidationforSignedZones-bookmark2082)</span>*[ ](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252170/Configuring+Recursion+and+Validation+for+Signed+Zones#ConfiguringRecursionandValidationforSignedZones-bookmark2082)
  - *<span style="color: #0000ff">[Defining](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252170/Configuring+Recursion+and+Validation+for+Signed+Zones#ConfiguringRecursionandValidationforSignedZones-bookmark2083)</span>*[ ](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252170/Configuring+Recursion+and+Validation+for+Signed+Zones#ConfiguringRecursionandValidationforSignedZones-bookmark2083)*<span style="color: #0000ff">[Negative](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252170/Configuring+Recursion+and+Validation+for+Signed+Zones#ConfiguringRecursionandValidationforSignedZones-bookmark2083)</span>*[ ](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252170/Configuring+Recursion+and+Validation+for+Signed+Zones#ConfiguringRecursionandValidationforSignedZones-bookmark2083)*<span style="color: #0000ff">[Trust](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252170/Configuring+Recursion+and+Validation+for+Signed+Zones#ConfiguringRecursionandValidationforSignedZones-bookmark2083)</span>*[ ](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252170/Configuring+Recursion+and+Validation+for+Signed+Zones#ConfiguringRecursionandValidationforSignedZones-bookmark2083)*<span style="color: #0000ff">[Anchors](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252170/Configuring+Recursion+and+Validation+for+Signed+Zones#ConfiguringRecursionandValidationforSignedZones-bookmark2083)</span>*[ ](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252170/Configuring+Recursion+and+Validation+for+Signed+Zones#ConfiguringRecursionandValidationforSignedZones-bookmark2083)
- *<span style="color: #0000ff">[Applying](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252163)</span>*[ ](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252163)*<span style="color: #0000ff">[Policies](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252163)</span>*[ ](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252163)*<span style="color: #0000ff">[and](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252163)</span>*[ ](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252163)*<span style="color: #0000ff">[Rules](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252163)</span>*[ ](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252163)*<span style="color: #0000ff">[to](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252163)</span>*[ ](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252163)*<span style="color: #0000ff">[DNS](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252163)</span>*[ ](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252163)*<span style="color: #0000ff">[Queries](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252163)</span>*[ ](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252163)*<span style="color: #0000ff">[that](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252163)</span>*[ ](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252163)*<span style="color: #0000ff">[Request](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252163)</span>*[ ](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252163)*<span style="color: #0000ff">[DNSSEC](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252163)</span>*[ ](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252163)*<span style="color: #0000ff">[Data](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252163)</span>*[ ](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252163)

#   
 > Macro (anchor)

> Macro (anchor)

> Macro (anchor)

**About** **DNSSEC**

  
 > Macro (anchor)

DNSSEC (DNS Security Extensions) provides mechanisms for authenticating the source of DNS data and ensuring its integrity. It protects DNS data from certain attacks, such as man-in the middle attacks and cache poisoning. A  
 man-in-the middle attack occurs when an attacker intercepts responses to queries and inserts false records. Cache poisoning can occur when a client accepts maliciously created data. DNSSEC helps you avoid such attacks on your networks.  
 DNSSEC provides changes to the DNS protocol and additional resource records (RRs) as described in the following RFCs:

- *RFC* *4033,* *DNS* *Security* *Introduction* *and* *Requirements*
- *RFC* *4034,* *Resource* *Records* *for* *the* *DNS* *Security* *Extensions*
- *RFC* *4035,* *DNSSEC* *Protocol* *Modifications*
- *RFC* *4641,* *DNSSEC* *Operational* *Practices*
- *RFC* *4956,* *DNS* *Security* *(DNSSEC)* *Opt-In*
- *RFC* *4986,* *Requirements* *Related* *to* *DNS* *Security* *(DNSSEC)* *Trust* *Anchor* *Rollover*
- *RFC* *5155,* *DNS* *Security* *(DNSSEC)* *Hashed* *Authenticated* *Denial* *of* *Existence*
- *RFC* *5702,* *Use* *of* *SHA-2* *Algorithms* *with* *RSA* *in* *DNSKEY* *and* *RRSIG* *Resource* *Records* *for* *DNSSEC*

DNSSEC uses public key cryptography to authenticate the source of DNS responses and to ensure that DNS responses were not modified during transit. Public key cryptography uses an asymmetric key algorithm. With asymmetric keys, one key is used to decrypt data that was encrypted using the other key.  
 In DNSSEC, the primary name server of a zone generates at least one public/private key pair. It "signs" each data set in the zone by running it through a one-way hash, and then encrypting the hash value with the private key. The public key is stored in an RR type introduced by DNSSEC, the DNSKEY RR. Resolvers use the DNSKEY record to decrypt the hash value. If the hash values match, then the resolver is assured of the authenticity of the message.  
 In addition to the DNSKEY record, DNSSEC also introduces new RRs which DNS servers can use to authenticate the non-existence of servers, zones, or resource records. For information about the DNSSEC resource records, see *<span style="color: #0000ff">[DNSSEC](#Chapter22DNSSEC-bookmark2018)</span>*[ ](#Chapter22DNSSEC-bookmark2018)*<span style="color: #0000ff">[Resource](#Chapter22DNSSEC-bookmark2018)</span>*[ ](#Chapter22DNSSEC-bookmark2018)*<span style="color: #0000ff">[Records](#Chapter22DNSSEC-bookmark2018)</span>*.  
 DNSSEC uses the EDNSO message extension*.* Resolvers include the EDNS OPT pseudo-RR with the DO (DNSSEC OK) bit set to indicate that they are requesting DNSSEC records. A DNS client or resolver sets the EDNS DO bit when it sends a query for data in a signed zone. When the DNS server receives such a query, it includes the additional DNSSEC records in its response, according to the DNSSEC standard rules. In addition, because DNSSEC messages are often large, the EDNSO message extension also provides mechanisms for handling larger DNS UDP messages. For information about EDNS0, refer to *RFC* *2671,* *Extension* *Mechanisms* *for* *DNS* *(EDNS0)*. For information about the DO bit, refer to *RFC* *3225,* *Indicating* *Resolver* *Support* *of* *DNSSEC.*

---

***<span style="color: #ff0000">WARNING</span>****<span style="color: #ff0000">:</span>* *<span style="color: #ff0000">Note</span>* *<span style="color: #ff0000">that</span>* *<span style="color: #ff0000">when</span>* *<span style="color: #ff0000">you</span>* *<span style="color: #ff0000">disable</span>* *<span style="color: #ff0000">EDNS0</span>* *<span style="color: #ff0000">on</span>* *<span style="color: #ff0000">the</span>* *<span style="color: #ff0000">appliance,</span>* *<span style="color: #ff0000">all</span>* *<span style="color: #ff0000">outgoing</span>* *<span style="color: #ff0000">DNSSEC</span>* *<span style="color: #ff0000">queries</span>* *<span style="color: #ff0000">to</span>* *<span style="color: #ff0000">zones</span>* *<span style="color: #ff0000">within</span>* *<span style="color: #ff0000">trusted</span>* *<span style="color: #ff0000">anchors</span>* *<span style="color: #ff0000">will</span>* *<span style="color: #ff0000">fail</span>* *<span style="color: #ff0000">even</span>* *<span style="color: #ff0000">if</span>* *<span style="color: #ff0000">DNSSEC</span>* *<span style="color: #ff0000">validation</span>* *<span style="color: #ff0000">is</span>* *<span style="color: #ff0000">enabled.</span>* *<span style="color: #ff0000">To ensure</span>* *<span style="color: #ff0000">that DNSSEC</span>* *<span style="color: #ff0000">functions</span>* *<span style="color: #ff0000">properly,</span>* *<span style="color: #ff0000">do</span>* *<span style="color: #ff0000">not</span>* *<span style="color: #ff0000">disable</span>* *<span style="color: #ff0000">EDNS0</span>* *<span style="color: #ff0000">on</span>* *<span style="color: #ff0000">the</span>* *<span style="color: #ff0000">appliance.</span>* *<span style="color: #ff0000">For</span>* *<span style="color: #ff0000">more</span>* *<span style="color: #ff0000">information,</span>* *<span style="color: #ff0000">see</span>* *<span style="color: #0000ff">[Using](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22251803)</span>*[ ](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22251803)*<span style="color: #0000ff">[Extension](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22251803)</span>* *<span style="color: #0000ff">[Mechanisms](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22251803)</span>*[ ](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22251803)*<span style="color: #0000ff">[for](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22251803)</span>*[ ](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22251803)*<span style="color: #0000ff">[DNS](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22251803)</span>*[ ](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22251803)*<span style="color: #0000ff">[(EDNS0)](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22251803)</span>**<span style="color: #ff0000">.</span>*

---

DNSSEC also supports new data in the packet header, the CD (Checking Disabled) bit and the AD (Authenticated Data) bit. The CD bit is used by resolvers in their DNS queries and the AD bit is used by recursive name servers in their responses to queries.  
 A resolver can set the CD bit in its query to indicate that the name server should not validate the DNS response and that the resolver takes responsibility for validating the DNS data it receives.  
 A name server that has successfully validated the data in a DNS response sets the AD (Authenticated Data) bit in the message header to indicate that all resource records in its response have been validated and are authentic. Note that unless the connection between the DNS server and client has been secured, such as through TSIG, the client cannot rely on the AD bit to indicate valid data. The data could have been changed in transit between the server and client. Resolvers can trust a response with the AD bit set only if their communication channel is secure.   
 You can also configure the NIOS appliance to always apply RPZ policies, DNS blacklists, or NXDOMAIN rules to DNS responses, regardless of whether the queries request DNSSEC data. For more information about how to configure this, see *<span style="color: #0000ff">[Applying](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252163)</span>*[ ](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252163)*<span style="color: #0000ff">[Policies](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252163)</span>*[ ](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252163)*<span style="color: #0000ff">[and](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252163)</span>*[ ](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252163)*<span style="color: #0000ff">[Rules](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252163)</span>*[ ](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252163)*<span style="color: #0000ff">[to](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252163)</span>*[ ](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252163)*<span style="color: #0000ff">[DNS](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252163)</span>*[ ](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252163)*<span style="color: #0000ff">[Queries](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252163)</span>*[ ](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252163)*<span style="color: #0000ff">[that](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252163)</span>*[ ](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252163)*<span style="color: #0000ff">[Request](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252163)</span>*[ ](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252163)*<span style="color: #0000ff">[DNSSEC](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252163)</span>*[ ](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252163)*<span style="color: #0000ff">[Data](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252163)</span>*. For information about RPZ policies, DNS blacklists, and NXDOMAIN rules, see their respective sections in this guide.

## > Macro (anchor)

> Macro (anchor)

DNSSEC Resource Records

> Macro (anchor)

Following are the DNSSEC RR types:

- DNS Public Key (DNSKEY) resource records — For information, see *<span style="color: #0000ff">[DNSKEY](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252224)</span>*[ ](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252224)*<span style="color: #0000ff">[Resource](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252224)</span>*[ ](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252224)*<span style="color: #0000ff">[Records](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252224)</span>*.
- Resource Record Signature (RRSIG) records — For information, see *<span style="color: #0000ff">[RRSIG](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252229)</span>*[ ](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252229)*<span style="color: #0000ff">[Resource](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252229)</span>*[ ](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252229)*<span style="color: #0000ff">[Records](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252229)</span>*.
- Next Secure (NSEC/NSEC3) records — For information, see *<span style="color: #0000ff">[NSEC/NSEC3](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252203)</span>*[ ](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252203)*<span style="color: #0000ff">[Resource](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252203)</span>*[ ](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252203)*<span style="color: #0000ff">[Records](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252203)</span>*[.](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252203)
- NSEC3PARAM records — For information, see *<span style="color: #0000ff">[NSEC3PARAM](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252207)</span>*[ ](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252207)*<span style="color: #0000ff">[Resource](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252207)</span>*[ ](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252207)*<span style="color: #0000ff">[Records](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252207)</span>*[.](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252207)
- Delegation Signer (DS) resource records — For information, see *<span style="color: #0000ff">[DS](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252211)</span>*[ ](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252211)*<span style="color: #0000ff">[Resource](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252211)</span>*[ ](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252211)*<span style="color: #0000ff">[Records](https://infoblox-docs.atlassian.net/wiki/spaces/NAG8/pages/22252211)</span>*.

For detailed information about each RR, refer to *RFC* *4034,* *Resource* *Records* *for* *the* *DNS* *Security* *Extensions* and *RFC* *5155,* *DNS* *Security* *(DNSSEC)* *Hashed* *Authenticated* *Denial* *of* *Existence.*

---

**Note:** The appliance supports IDNs for DNSKEY records, DS records, NSEC records, NSEC3PARAM records, and RRSIG records.

---