troubleshooting Question

How can I distinguish the active ksk dnssec

Avatar of Richard Frank
Richard FrankFlag for Netherlands asked on
DNS* dnssec
3 Comments1 Solution83 ViewsLast Modified:
I use windows 2012r2 as DNS server.
After signing a domain 4 DNS keys are generated
2 ksk and 2 zsk
I have to publish one of the ksk with the nameprovider for the chain of trust.
but I don't understand which one, because except the public key the files are identical. So how can I find which key is active and which one is the roll over(standby) key?
When visiting dnsviz.com I can see that I have published the wrong key, see picture.
2017-03-14-14_24_36-DNSViz---Interne.png
ASKER CERTIFIED SOLUTION
Richard Frank
Systems Administrator

Our community of experts have been thoroughly vetted for their expertise and industry experience.

Join our community to see this answer!
Unlock 1 Answer and 3 Comments.
Start Free Trial
Learn from the best

Network and collaborate with thousands of CTOs, CISOs, and IT Pros rooting for you and your success.

Andrew Hancock - VMware vExpert
See if this solution works for you by signing up for a 7 day free trial.
Unlock 1 Answer and 3 Comments.
Try for 7 days

”The time we save is the biggest benefit of E-E to our team. What could take multiple guys 2 hours or more each to find is accessed in around 15 minutes on Experts Exchange.

-Mike Kapnisakis, Warner Bros