DNS server that has DNSSEC enabled does not validate signed zones in Windows Server 2012 R2

Applies to: Windows Server 2012 R2 DatacenterWindows Server 2012 R2 StandardWindows Server 2012 R2 Essentials More

This issue occurs because the DNS server cannot resolve the Canonical Name (CNAME) records in signed zones.

Note The extension of the DNSSEC is Domain Name System Security Extensions.

Status


Microsoft has confirmed that this is a problem in the Microsoft products that are listed in the "Applies to" section.

More Information


See the terminology that Microsoft uses to describe software updates.