0

I am going to implement DANE protocol on Windows server 2016. I configured DNS and Active directories. Now I want to generate self signed certificate for my domain and Generate TLSA record. and I want to add TLSA record in DNS.

Milind Sutar
  • 9
  • 1
  • 2
  • 8

1 Answers1

0

This may help:

Add-DnsServerResourceRecord -TLSA -CertificateAssociationData "digest" -CertificateUsage DomainIssuedCertificate -MatchingType Sha256Hash -Selector FullCertificate -ZoneName mydomain.com -name _443._tcp.example.mydomain.com

Also note: https://support.microsoft.com/en-sg/help/4489468/windows-server-domain-name-system-dns-flag-day-compliance

Mark Gilbert
  • 1
  • 2