[Opendnssec-user] Migrating signed zones from MS DNS 2008 to OpenDNSSEC

Roman Serbski mefystofel at gmail.com
Wed Oct 8 16:04:08 UTC 2014


We're planning to migrate a couple of signed zones from Microsoft DNS
2008 R2 servers to OpenDNSSEC.

Has anybody done this before and willing to share some tips/hints
especially with regards to reusing the keys? If I'm not wrong, they
are in PFX file format. I found
https://wiki.opendnssec.org/display/DOCS/Migrating+to+OpenDNSSEC but
it explains how to convert BIND files.

We can also afford start fresh. In that case, is it recommended to
reduce TTL prior to removal of DS records from the parent zone?

Thank you in advance.

More information about the Opendnssec-user mailing list