<div>
The DNSSEC Properties page of a signed zone has a KSK tab that shows the GUIDs of the active and standby keys, but so far I haven't been able to locate those GUIDs anywhere else, so they aren't very useful. Are you able to simply publish both of them?
</div>


<div>
<div class="content wysiwyg-content">
I use windows 2012r2 as DNS server.<br />
After signing a domain 4 DNS keys are generated<br />
2 ksk and 2 zsk<br />
I have to publish one of the ksk with the nameprovider for the chain of trust. <br />
but I don't understand which one, because except the public key the files are identical. So how can I find which key is active and which one is the roll over(standby) key?<br />
When visiting dnsviz.com I can see that I have published the wrong key, see picture.<br />
<a href="https://filedb.experts-exchange.com/incoming/2017/03_w11/1150607/2017-03-14-14_24_36-DNSViz---Interne.png" target="_blank" class="file-inline" title="2017-03-14-14_24_36-DNSViz---Interne.png (23 KB)"><svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 512 512"><path d="M67.508 468.467c-58.005-58.013-58.016-151.92 0-209.943l225.011-225.04c44.643-44.645 117.279-44.645 161.92 0 44.743 44.749 44.753 117.186 0 161.944l-189.465 189.49c-31.41 31.413-82.518 31.412-113.926.001-31.479-31.482-31.49-82.453 0-113.944L311.51 110.491c4.687-4.687 12.286-4.687 16.972 0l16.967 16.971c4.685 4.686 4.685 12.283 0 16.969L184.983 304.917c-12.724 12.724-12.73 33.328 0 46.058 12.696 12.697 33.356 12.699 46.054-.001l189.465-189.489c25.987-25.989 25.994-68.06.001-94.056-25.931-25.934-68.119-25.932-94.049 0l-225.01 225.039c-39.249 39.252-39.258 102.795-.001 142.057 39.285 39.29 102.885 39.287 142.162-.028A739446.174 739446.174 0 0 1 439.497 238.49c4.686-4.687 12.282-4.684 16.969.004l16.967 16.971c4.685 4.686 4.689 12.279.004 16.965a755654.128 755654.128 0 0 0-195.881 195.996c-58.034 58.092-152.004 58.093-210.048.041z"/></svg>2017-03-14-14_24_36-DNSViz---Interne.png</a>
</div>
</div>


2017-03-14-14_24_36-DNSViz---Interne.png

I use windows 2012r2 as DNS server.
After signing a domain 4 DNS keys are generated
2 ksk and 2 zsk
I have to publish one of the ksk with the nameprovider for the chain of trust. 
but I don't understand which one, because except the public key the files are identical. So how can I find which key is active and which one is the roll over(standby) key?
When visiting dnsviz.com I can see that I have published the wrong key, see picture.

The DNSSEC Properties page of a signed zone has a KSK tab that shows the GUIDs of the active and standby keys, but so far I haven&amp;#39;t been able to locate those GUIDs anywhere else, so they aren&amp;#39;t very useful. Are you able to simply publish both of them?

How can I distinguish the active ksk dnssec

I use windows 2012r2 as DNS server.
After signing a domain 4 DNS keys are generated
2 ksk and 2 zsk
I have to publish one of the ksk with the nameprovider for the chain of trust. 
but I don&amp;#39;t understand which one, because except the public key the files are identical. So how can I find which key is active and which one is the roll over(standby) key?
When visiting dnsviz.com I can see that I have published the wrong key, see picture.

The Domain Name System (DNS) is a hierarchical, globally distributed system responsible for associating the name of a computer, service or other resource into an IP address for connecting to the Internet or a private network. Most prominently, it translates domain names to the numerical IP addresses needed for the purpose of computer services and devices worldwide.