# DNSSEC - 3 days: Agenda # ## Time Schedule ## | Session | Time | |----------------------|------------------| | Session 1 | 08:30 - 10:00 | | Break | 10:00 - 10:00 | | Session 2 | 10:00 - 11:30 | | Lunch | 11:30 - 13:00 | | Session 3 | 13:00 - 14:30 | | Break | 14:30 - 15:00 | | Session 4 | 15:00 - 16:30 | All times EAT, UTC+3. ## Instructors ## | | Name | Organization | Country | |----|-----------------------|----------------------------|--------------| | PM | Paul Muchene | ICANN | Kenya | | PR | Phil Regnauld | NSRC | Denmark | ## Sessions ## | Session | Topic | Inst | Materials | |------------------------|---------------------------|---------|---------------------------------------------------| | **DAY 1** | | | | | Session 1 | Introduction to the Workshop | PR | Introduction to Workshop [[PDF](dns/materials/presos/en/dnssec-welcome.pdf)] | | | DNSSEC 101 | PM & PR | Why DNSSEC? [[PDF](dns/materials/presos/en/dnssec-101-abridged-slides.pdf)] | | | Access Lab Platform | PM | Virtual Lab Platform [[TXT](dns/materials/labs/en/virtual-lab-platform.txt)]
Testing SSH access to the class environment [[HTML](dns/materials/labs/en/tyrekick.html)] | | Session 2 | Diagnostics using dig | PM | Diagnostics using dig [[HTML](dns/materials/labs/en/diagnostics-using-dig.html)] | | | Create your domain | PM | Zone creation [[HTML](dns/materials/labs/en/dns-delegation-exercise.html)] | | Session 3 | Zone Signing | PM | Recap of Public Key Cryptography [[PDF](dns/materials/presos/en/dnssec-101-abridged-slides.pdf)]| | Session 4 | Interactive Demo | PR | | | | Zone Signing | PM | Zone signing [HTML](dns/materials/labs/en/dnssec-bind-signing.html)
Upload DS to root [HTML](dns/materials/labs/en/dnssec-bind-upload-ds.html) | | **DAY 2** | | | | | Session 1 | DNSSEC in Action | PR | Effects of Zone Tampering
| | Session 2 | DNSSEC Operations | PM | DNSSEC ops [[PDF](dns/materials/presos/en/dnssec-operations.pdf)]
Monitoring
Signature Validity
Domain Name Transfers [[PPTX](dns/materials/presos/en/dnssec-domain-transfer.pptx), [PDF](dns/materials/presos/en/dnssec-domain-transfer.pdf)]
Signing Parameters [[PPTX](dns/materials/presos/en/dnssec-signing-parameters.pptx), [PDF](dns/materials/presos/en/dnssec-signing-parameters.pdf)] | | Session 3 | ZSK Rollover | PM | ZSK Rollover with BIND10.0 [[HTML](dns/materials/labs/en/dnssec-bind-zsk-rollover.html)] | | Session 4 | DNSSEC Monitoring | PM | Nagios checksig lab [HTML](dns/materials/labs/en/dnssec-nagios-lab.html) | | **DAY 3** | | | | | Session 1 | DNSSEC Operations | PR | [DNSViz](https://dnsviz.net)
DNSSEC Timers [[PPTX](dns/materials/presos/en/dnssec-timers.pptx), [PDF](dns/materials/presos/en/dnssec-timers.pdf)]
[OpenDNSSEC](https://opendnssec.org/)
HSM Demonstration
Root KSK Management | | Session 2 | Signing with OpenDNSSEC | PM | OpenDNSSEC Lab 1 [[HTML](dns/materials/labs/en/opendnssec-lab1.html)] | | Session 3 | DNSSEC Validation | PM | DNSSEC Validation Lab [[PDF](dns/materials/presos/en/dnssec-validation-unbound.pdf)]
## Additional Information ## - [Security and Resiliency of the DNS](dns/materials/presos/en/dns-security-resiliency.pdf) - [Manual ZSK rollover](dns/materials/labs/en/dnssec-bind-manual-zsk-rollover.html) - [Manual KSK rollover](dns/materials/labs/en/dnssec-bind-manual-ksk-rollover.html) - [Demo DPS (DNSSEC Practice Statement)](dns/materials/presos/en/dnssec-demo-dps.pdf)