This article describes an issue in which the Domain Name System Security Extensions (DNSSEC) validation fails on a Windows Server 2012 R2-based DNS server. Before you install this update, see the Prerequisites section.
Cause
This issue occurs if the DNSKEY query is targeted for a name that has DNAME configured. In this situation, the Windows Server 2012 R2-based DNS server responds back with the DNSKEY rather than the correct target name.
How to get this update
Important If you install a language pack after you install this update, you must reinstall this update. Therefore, we recommend that you install any language packs that you need before you install this update. For more information, see Add language packs to Windows.
Method 1: Windows Update
This update is provided as a Recommended update on Windows Update. For more information on how to run Windows Update, see How to get an update through Windows Update.
Method 2: Microsoft Download Center
The following files are available for download from the Microsoft Download Center:
Operating system |
Update |
---|---|
All supported x64-based versions of Windows Server 2012 R2 |
For more information about how to download Microsoft support files, select the following article number to view the article in the Microsoft Knowledge Base:
119591 How to obtain Microsoft support files from online services Microsoft scanned this file for viruses. Microsoft used the most current virus-detection software that was available on the date that the file was posted. The file is stored on security-enhanced servers that help prevent any unauthorized changes to the file.
Update detail information
Prerequisites
To install this update, you should first install April 2014, update rollup for Windows RT 8.1, Windows 8.1, and Windows Server 2012 R2 (2919355) in Windows Server 2012 R2.
Registry information
To apply this update, you don't have to make any changes to the registry.
Restart requirement
You may have to restart the computer after you apply this update.
Update replacement information
This update doesn't replace a previously released update.
Known issue
After you install this update, the DNAME resolution by Microsoft DNS Servers will be changed.
Previously, you could query for the domain (type=ANY or type=A) example.com, and get back the the host (A) record for the DNAME. After you install this update, that query fails.
This change was made for compliancy with RFC 6672.
Status
Microsoft has confirmed that this is a problem in the Microsoft products that are listed in the "Applies to" section.
References
Learn about the terminology that Microsoft uses to describe software updates.
File Information
The English (United States) version of this software update installs files that have the attributes that are listed in the following tables.
Notes
-
The files that apply to a specific product, milestone (RTM, SPn), and service branch (LDR, GDR) can be identified by examining the file version numbers as shown in the following table:
Version
Product
Milestone
Service branch
6.3.960 0.18Â xxx
Windows Server 2012 R2
RTM
GDR
-
GDR service branches contain only those fixes that are widely released to address widespread, critical issues. LDR service branches contain hotfixes in addition to widely released fixes.
-
The MANIFEST files (.manifest) and the MUM files (.mum) that are installed for each environment are listed in the "Additional file information" section. MUM, MANIFEST, and the associated security catalog (.cat) files, are very important to maintain the state of the updated components. The security catalog files, for which the attributes are not listed, are signed with a Microsoft digital signature.
x64 Windows Server 2012 R2
File name |
File version |
File size |
Date |
Time |
Platform |
---|---|---|---|---|---|
Cache.dns |
Not applicable |
3,198 |
18-Jun-2013 |
14:43 |
Not applicable |
Dns.exe |
6.3.9600.18227 |
1,735,680 |
03-Feb-2016 |
15:00 |
x64 |
Dnsserver.events.xml |
Not applicable |
609 |
18-Jun-2013 |
14:43 |
Not applicable |
x64 Windows Server 2012 R2
File property |
Value |
---|---|
File name |
Amd64_085eab58468f0a0d477ce69bcae7ff0d_31bf3856ad364e35_6.3.9600.18227_none_11f30df5e736be69.manifest |
File version |
Not applicable |
File size |
718 |
Date (UTC) |
03-Feb-2016 |
Time (UTC) |
20:32 |
Platform |
Not applicable |
File name |
Amd64_0b3aff0f6c540295eaf99a283b509a8d_31bf3856ad364e35_6.3.9600.18227_none_acf113bef6fa186a.manifest |
File version |
Not applicable |
File size |
718 |
Date (UTC) |
03-Feb-2016 |
Time (UTC) |
20:32 |
Platform |
Not applicable |
File name |
Amd64_0d83aee37b3b818962069888a2250601_31bf3856ad364e35_6.3.9600.18227_none_7756cf23488a073c.manifest |
File version |
Not applicable |
File size |
718 |
Date (UTC) |
03-Feb-2016 |
Time (UTC) |
20:32 |
Platform |
Not applicable |
File name |
Amd64_1222184c6ebef25122e10cc8e20e60aa_31bf3856ad364e35_6.3.9600.18227_none_9fc8de2a80ebf6a0.manifest |
File version |
Not applicable |
File size |
718 |
Date (UTC) |
03-Feb-2016 |
Time (UTC) |
20:32 |
Platform |
Not applicable |
File name |
Amd64_408ef6a6c97a41dc1a410bac6b9e930e_31bf3856ad364e35_6.3.9600.18227_none_9244372c172c5237.manifest |
File version |
Not applicable |
File size |
718 |
Date (UTC) |
03-Feb-2016 |
Time (UTC) |
20:32 |
Platform |
Not applicable |
File name |
Amd64_4247c52f79e93d573c9752654375209e_31bf3856ad364e35_6.3.9600.18227_none_81303cb3a7ed8116.manifest |
File version |
Not applicable |
File size |
718 |
Date (UTC) |
03-Feb-2016 |
Time (UTC) |
20:32 |
Platform |
Not applicable |
File name |
Amd64_5b1257bd7e46202f4d7a35d34ee97145_31bf3856ad364e35_6.3.9600.18227_none_8aafa284b994af8e.manifest |
File version |
Not applicable |
File size |
718 |
Date (UTC) |
03-Feb-2016 |
Time (UTC) |
20:32 |
Platform |
Not applicable |
File name |
Amd64_6c4cfb42c9e09deb5e380531e557680c_31bf3856ad364e35_6.3.9600.18227_none_0f882db7e6779c47.manifest |
File version |
Not applicable |
File size |
718 |
Date (UTC) |
03-Feb-2016 |
Time (UTC) |
20:32 |
Platform |
Not applicable |
File name |
Amd64_899525807edfe2d78d9089577e0eb51a_31bf3856ad364e35_6.3.9600.18227_none_68e69321c053ee0f.manifest |
File version |
Not applicable |
File size |
718 |
Date (UTC) |
03-Feb-2016 |
Time (UTC) |
20:32 |
Platform |
Not applicable |
File name |
Amd64_8f0236c0e53295c174661b186df0875e_31bf3856ad364e35_6.3.9600.18227_none_be83357dc2982d76.manifest |
File version |
Not applicable |
File size |
710 |
Date (UTC) |
03-Feb-2016 |
Time (UTC) |
20:32 |
Platform |
Not applicable |
File name |
Amd64_8f62d4ac17a95e39b83ca2105bb17c3d_31bf3856ad364e35_6.3.9600.18227_none_21cd63d3be843d2c.manifest |
File version |
Not applicable |
File size |
718 |
Date (UTC) |
03-Feb-2016 |
Time (UTC) |
20:32 |
Platform |
Not applicable |
File name |
Amd64_c5078e3f60b2abb46af327d10bf05391_31bf3856ad364e35_6.3.9600.18227_none_d24c2e330240fda5.manifest |
File version |
Not applicable |
File size |
718 |
Date (UTC) |
03-Feb-2016 |
Time (UTC) |
20:32 |
Platform |
Not applicable |
File name |
Amd64_e75ebaaf583e27b3987ab0d69ec64b01_31bf3856ad364e35_6.3.9600.18227_none_74f559e52be4455b.manifest |
File version |
Not applicable |
File size |
718 |
Date (UTC) |
03-Feb-2016 |
Time (UTC) |
20:32 |
Platform |
Not applicable |
File name |
Amd64_microsoft-windows-d..r-service.resources_31bf3856ad364e35_6.3.9600.18227_de-de_a41b27144f20e16d.manifest |
File version |
Not applicable |
File size |
2,476 |
Date (UTC) |
03-Feb-2016 |
Time (UTC) |
20:32 |
Platform |
Not applicable |
File name |
Amd64_microsoft-windows-d..r-service.resources_31bf3856ad364e35_6.3.9600.18227_en-us_4d0bfd0d3dfeed32.manifest |
File version |
Not applicable |
File size |
2,476 |
Date (UTC) |
03-Feb-2016 |
Time (UTC) |
20:32 |
Platform |
Not applicable |
File name |
Amd64_microsoft-windows-d..r-service.resources_31bf3856ad364e35_6.3.9600.18227_es-es_4cd759f13e25ded7.manifest |
File version |
Not applicable |
File size |
2,476 |
Date (UTC) |
03-Feb-2016 |
Time (UTC) |
20:32 |
Platform |
Not applicable |
File name |
Amd64_microsoft-windows-d..r-service.resources_31bf3856ad364e35_6.3.9600.18227_fr-fr_ef8ecff030f7f539.manifest |
File version |
Not applicable |
File size |
2,476 |
Date (UTC) |
03-Feb-2016 |
Time (UTC) |
20:32 |
Platform |
Not applicable |
File name |
Amd64_microsoft-windows-d..r-service.resources_31bf3856ad364e35_6.3.9600.18227_it-it_d9b6c6370829dab7.manifest |
File version |
Not applicable |
File size |
2,476 |
Date (UTC) |
03-Feb-2016 |
Time (UTC) |
20:32 |
Platform |
Not applicable |
File name |
Amd64_microsoft-windows-d..r-service.resources_31bf3856ad364e35_6.3.9600.18227_ja-jp_7bdc4543fb44ec92.manifest |
File version |
Not applicable |
File size |
2,476 |
Date (UTC) |
03-Feb-2016 |
Time (UTC) |
20:32 |
Platform |
Not applicable |
File name |
Amd64_microsoft-windows-d..r-service.resources_31bf3856ad364e35_6.3.9600.18227_ko-kr_1f4621f8edb5b3a8.manifest |
File version |
Not applicable |
File size |
2,476 |
Date (UTC) |
03-Feb-2016 |
Time (UTC) |
20:32 |
Platform |
Not applicable |
File name |
Amd64_microsoft-windows-d..r-service.resources_31bf3856ad364e35_6.3.9600.18227_pt-br_4ea83391aab2ead1.manifest |
File version |
Not applicable |
File size |
2,476 |
Date (UTC) |
03-Feb-2016 |
Time (UTC) |
20:32 |
Platform |
Not applicable |
File name |
Amd64_microsoft-windows-d..r-service.resources_31bf3856ad364e35_6.3.9600.18227_ru-ru_962d14c18f03e8d9.manifest |
File version |
Not applicable |
File size |
2,476 |
Date (UTC) |
03-Feb-2016 |
Time (UTC) |
20:32 |
Platform |
Not applicable |
File name |
Amd64_microsoft-windows-d..r-service.resources_31bf3856ad364e35_6.3.9600.18227_zh-cn_ac92677b2520c744.manifest |
File version |
Not applicable |
File size |
2,476 |
Date (UTC) |
03-Feb-2016 |
Time (UTC) |
20:32 |
Platform |
Not applicable |
File name |
Amd64_microsoft-windows-d..r-service.resources_31bf3856ad364e35_6.3.9600.18227_zh-hk_ab3d600925fc39d4.manifest |
File version |
Not applicable |
File size |
2,476 |
Date (UTC) |
03-Feb-2016 |
Time (UTC) |
20:32 |
Platform |
Not applicable |
File name |
Amd64_microsoft-windows-d..r-service.resources_31bf3856ad364e35_6.3.9600.18227_zh-tw_b08ea4d12291a3b4.manifest |
File version |
Not applicable |
File size |
2,476 |
Date (UTC) |
03-Feb-2016 |
Time (UTC) |
20:32 |
Platform |
Not applicable |
File name |
Amd64_microsoft-windows-dns-server-service_31bf3856ad364e35_6.3.9600.18227_none_3f07f670aa5879f9.manifest |
File version |
Not applicable |
File size |
287,181 |
Date (UTC) |
03-Feb-2016 |
Time (UTC) |
17:01 |
Platform |
Not applicable |
File name |
Update.mum |
File version |
Not applicable |
File size |
16,888 |
Date (UTC) |
03-Feb-2016 |
Time (UTC) |
20:32 |
Platform |
Not applicable |