LACNIC 19 DNSSEC Tutorial 5 May 1400-1800 and 6 May 0900-1230 2013 Medellin, CO

Instructors: Richard Lamb, ICANN / Gonzalo Romero, .CO Internet / Luis Diego Espinoza
Participants need to bring a computer capable of running "ssh"

Day 1 Part 1 1400-1800
Introduction/Welcome
Cuestionario (Espaniol) EN
The Business Case for DNSSEC (~15 min)
DNSSEC Overview (~45 min)
Class Network Diagram
Exercise - Create a zone and delegate it (~30 min)
Exercise - Sign it with BIND (~30 min)
BREAK
Exercise - Key (ZSK) Rollover (~30 min)
End of Part 1
Day 2 Part 2 0900-1230
Enabling validation on your resolver (~15min)
Signing a CO domain with DNSSEC extensions (~30 min)
DNSSEC Implementation Considerations (~30min) BREAK
Implementacion DNSSEC en .CR - Luis Diego Espinoza (~30min)
Exercise - Bind in-line signing (~30min)
Q+A
Group Photo!
End of Part 2

Resources

Class Network Diagram
Putty - SSH for Windows
CZ NIC DNSSEC Validator Chrome Plug-In
CZ NIC DNSSEC Validator Firefox Plug-In
ISOC Deploy360 Programme
Sample DNSSEC Practice Statement ES EN
Sample Key Ceremony Script ES EN
PKCS11 Smart Card and TPM DNSSEC Material
DNSSEC Visualization Tool dnsviz.net
Inline-Signing-in-ISC-BIND-9.9.0-Example

A collaborative effort between .CO Internet, NSRC and ICANN. Thanks to Gonzalo Romero, Phil Regnauld, Luis Diego Espinoza, Francisco Arias, Tomofumi Okubo, Jakob Schlyter, Fredik Lundgren, David Miller and many others for contributing to this effort.
THE SERVICE IS PROVIDED "AS IS" AND ICANN, .CO Internet, NSRC DISCLAIM ALL WARRANTIES WITH REGARD TO THIS SERVICE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL ICANN OR NSRC BE LIABLE FOR ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SERVICE.