Forum Discussion
Richard_H_12595
Nimbostratus
NimbostratusGTM DNSSEC module and dotgov domains
Hi,
I am trying to get a .gov domain hosted by us on a GTM with the DNSSEC module configured and am running into issues getting it to pass the validation tests from the feds. They are wanting t...
Cory_50405
Noctilucent
NoctilucentYou don't publish the DS record on your GTM. You provide the DS digest to dotgov for them to publish, along with the key tag, algorithm, digest type and expiration date.
Other than creating the DNSSEC zone and applying the appropriate KSK and ZSKs to the zone, you don't need to publish anything special in DNS.
Some good DNSSEC checking tools:
dnsviz.net dnscheck.iis.se