Forum Discussion
Anzine321
Cirrus
CirrusDnssec deployment
Step to configur dnssec
1.create ksk and zsk
2.create zone sec
3. Register ds record to registrar
i have config sync gtm and intermitten, anybody know what the problem is because i have dc and drc device with config sync ? And how to rolleover ksk with automatic, should i register again ds on step3
1 Reply
- Jeff_Granieri
Employee
Hi Anzine321 For good reference on the setup please check out DNSSEC, for the most part make sure NTP is working across all devices in the sync-group and there is no time drift. I am not sure what is intermittent, but as per this doc---> DNS objects are synchronized DNSSEC zone/keys are synchronized. To help with debugging DNSSEC issues check this out DNSSEC Debugging
