The Windows DNS Server must maintain the integrity of information during preparation for transmission.

An XCCDF Rule

Description

Information can be unintentionally or maliciously disclosed or modified during preparation for transmission, including, for example, during aggregation, at protocol transformation points, and during packing/unpacking. These unauthorized disclosures or modifications compromise the confidentiality or integrity of the information.

ID: SV-259398r961638_rule
Version: WDNS-22-000070
Severity: Medium
References: CCI-002420
Updated: 15 days ago

Remediation Templates

Sign or re-sign the hosted zone(s) on the DNS server being validated.

Log on to the Windows DNS Server using the account designated as Administrator or DNS Administrator.

Press the Windows key + R and execute "dnsmgmt.msc".
On the opened DNS Manager snap-in from the left pane, expand the server name for the DNS server, and then expand "Forward Lookup Zones".

From the expanded list, right-click to select the zone (repeat for each hosted zone), point to DNSSEC, and then click "Sign the Zone" using either approved saved parameters or approved custom parameters.

The Windows DNS Server must maintain the integrity of information during preparation for transmission.

Description

Remediation Templates

A Manual Procedure