How add TLSA RR in Windows server 2016 DNS zone

988 Views Asked by At

I am going to implement DANE protocol on Windows server 2016. I configured DNS and Active directories. Now I want to generate self signed certificate for my domain and Generate TLSA record. and I want to add TLSA record in DNS.

1

There are 1 best solutions below

0
On

This may help:

Add-DnsServerResourceRecord -TLSA -CertificateAssociationData "digest" -CertificateUsage DomainIssuedCertificate -MatchingType Sha256Hash -Selector FullCertificate -ZoneName mydomain.com -name _443._tcp.example.mydomain.com

Also note: https://support.microsoft.com/en-sg/help/4489468/windows-server-domain-name-system-dns-flag-day-compliance