DNS Servers

When using DANE you need a DNS server that supports DNSSEC. Since the DNS servers supplied with Windows server operating systems do not currently support this function, you can set up a connection to such a server here.

Connection to a DNSSEC-enabled server

Configuring the DNS server

To enter the IP addresses of a primary and secondary server with DNSSEC support, proceed as follows:

  1. Go to Configuration > Connected systems > DNS Servers.
  2. Click Modify.
    Configuration of a DNSSEC-enabled server
  3. Perform one of the following two steps:
    • Select Use the servers configured in Windows if you want to use Windows' own servers.
    • Select Use these servers if you want to use a third-party server. Then enter the corresponding addresses.

      TIP: Click Use Google to enter the publicly accessible Google DNS server into the configuration.

  4. Select whether you want to activate DNSSEC (recommended).

    NOTE: DNSSEC secures the transmission of resource records through digital signatures. This ensures the authenticity of these resource records.

  5. Click Save and close.

NOTE: DANE is used to check the transport encryption when delivering emails to your partners. See Default partner settings.