DNS server that has DNSSEC enabled does not validate signed zones in Windows Server 2012 R2

Applies to: Windows Server 2012 R2 DatacenterWindows Server 2012 R2 StandardWindows Server 2012 R2 Essentials

This issue occurs because the DNS server cannot resolve the Canonical Name (CNAME) records in signed zones.

Note The extension of the DNSSEC is Domain Name System Security Extensions.


Microsoft has confirmed that this is a problem in the Microsoft products that are listed in the "Applies to" section.

More Information

See the terminology that Microsoft uses to describe software updates.