DNSSEC validation fails when incorrect response to DNSKEY query is sent on Windows Server 2012 R2-based DNS server

This article describes an issue in which the Domain Name System Security Extensions (DNSSEC) validation fails on a Windows Server 2012 R2-based DNS server. Before you install this update, see the Prerequisites section.
Cause
This issue occurs if the DNSKEY query is targeted for a name that has DNAME configured. In this situation, the Windows Server 2012 R2-based DNS server responds back with the DNSKEY rather than the correct target name.
How to get this update
Important If you install a language pack after you install this update, you must reinstall this update. Therefore, we recommend that you install any language packs that you need before you install this update. For more information, see Add language packs to Windows.

Method 1: Windows Update

This update is provided as a Recommended update on Windows Update. For more information on how to run Windows Update, see How to get an update through Windows Update.

Method 2: Microsoft Download Center

The following files are available for download from the Microsoft Download Center:
Operating systemUpdate
All supported x64-based versions of Windows Server 2012 R2DownloadDownload the package now.
For more information about how to download Microsoft support files, select the following article number to view the article in the Microsoft Knowledge Base:
119591 How to obtain Microsoft support files from online services
Microsoft scanned this file for viruses. Microsoft used the most current virus-detection software that was available on the date that the file was posted. The file is stored on security-enhanced servers that help prevent any unauthorized changes to the file.
Update detail information

Prerequisites

To install this update, you should first install April 2014, update rollup for Windows RT 8.1, Windows 8.1, and Windows Server 2012 R2 (2919355) in Windows Server 2012 R2.

Registry information

To apply this update, you don't have to make any changes to the registry.

Restart requirement

You may have to restart the computer after you apply this update.

Update replacement information

This update doesn't replace a previously released update.
Status
Microsoft has confirmed that this is a problem in the Microsoft products that are listed in the "Applies to" section.
References
Learn about the terminology that Microsoft uses to describe software updates.
File Information
The English (United States) version of this software update installs files that have the attributes that are listed in the following tables.

Windows Server 2012 R2

Notes
  • The files that apply to a specific product, milestone (RTM, SPn), and service branch (LDR, GDR) can be identified by examining the file version numbers as shown in the following table:
    VersionProductMilestoneService branch
    6.3.960 0.18 xxxWindows Server 2012 R2RTMGDR
  • GDR service branches contain only those fixes that are widely released to address widespread, critical issues. LDR service branches contain hotfixes in addition to widely released fixes.
  • The MANIFEST files (.manifest) and the MUM files (.mum) that are installed for each environment are listed in the "Additional file information" section. MUM, MANIFEST, and the associated security catalog (.cat) files, are very important to maintain the state of the updated components. The security catalog files, for which the attributes are not listed, are signed with a Microsoft digital signature.
x64 Windows Server 2012 R2
File nameFile versionFile sizeDateTimePlatform
Cache.dnsNot applicable3,19818-Jun-201314:43Not applicable
Dns.exe6.3.9600.182271,735,68003-Feb-201615:00x64
Dnsserver.events.xmlNot applicable60918-Jun-201314:43Not applicable

Additional file information

x64 Windows Server 2012 R2
File propertyValue
File nameAmd64_085eab58468f0a0d477ce69bcae7ff0d_31bf3856ad364e35_6.3.9600.18227_none_11f30df5e736be69.manifest
File versionNot applicable
File size718
Date (UTC)03-Feb-2016
Time (UTC)20:32
PlatformNot applicable
File nameAmd64_0b3aff0f6c540295eaf99a283b509a8d_31bf3856ad364e35_6.3.9600.18227_none_acf113bef6fa186a.manifest
File versionNot applicable
File size718
Date (UTC)03-Feb-2016
Time (UTC)20:32
PlatformNot applicable
File nameAmd64_0d83aee37b3b818962069888a2250601_31bf3856ad364e35_6.3.9600.18227_none_7756cf23488a073c.manifest
File versionNot applicable
File size718
Date (UTC)03-Feb-2016
Time (UTC)20:32
PlatformNot applicable
File nameAmd64_1222184c6ebef25122e10cc8e20e60aa_31bf3856ad364e35_6.3.9600.18227_none_9fc8de2a80ebf6a0.manifest
File versionNot applicable
File size718
Date (UTC)03-Feb-2016
Time (UTC)20:32
PlatformNot applicable
File nameAmd64_408ef6a6c97a41dc1a410bac6b9e930e_31bf3856ad364e35_6.3.9600.18227_none_9244372c172c5237.manifest
File versionNot applicable
File size718
Date (UTC)03-Feb-2016
Time (UTC)20:32
PlatformNot applicable
File nameAmd64_4247c52f79e93d573c9752654375209e_31bf3856ad364e35_6.3.9600.18227_none_81303cb3a7ed8116.manifest
File versionNot applicable
File size718
Date (UTC)03-Feb-2016
Time (UTC)20:32
PlatformNot applicable
File nameAmd64_5b1257bd7e46202f4d7a35d34ee97145_31bf3856ad364e35_6.3.9600.18227_none_8aafa284b994af8e.manifest
File versionNot applicable
File size718
Date (UTC)03-Feb-2016
Time (UTC)20:32
PlatformNot applicable
File nameAmd64_6c4cfb42c9e09deb5e380531e557680c_31bf3856ad364e35_6.3.9600.18227_none_0f882db7e6779c47.manifest
File versionNot applicable
File size718
Date (UTC)03-Feb-2016
Time (UTC)20:32
PlatformNot applicable
File nameAmd64_899525807edfe2d78d9089577e0eb51a_31bf3856ad364e35_6.3.9600.18227_none_68e69321c053ee0f.manifest
File versionNot applicable
File size718
Date (UTC)03-Feb-2016
Time (UTC)20:32
PlatformNot applicable
File nameAmd64_8f0236c0e53295c174661b186df0875e_31bf3856ad364e35_6.3.9600.18227_none_be83357dc2982d76.manifest
File versionNot applicable
File size710
Date (UTC)03-Feb-2016
Time (UTC)20:32
PlatformNot applicable
File nameAmd64_8f62d4ac17a95e39b83ca2105bb17c3d_31bf3856ad364e35_6.3.9600.18227_none_21cd63d3be843d2c.manifest
File versionNot applicable
File size718
Date (UTC)03-Feb-2016
Time (UTC)20:32
PlatformNot applicable
File nameAmd64_c5078e3f60b2abb46af327d10bf05391_31bf3856ad364e35_6.3.9600.18227_none_d24c2e330240fda5.manifest
File versionNot applicable
File size718
Date (UTC)03-Feb-2016
Time (UTC)20:32
PlatformNot applicable
File nameAmd64_e75ebaaf583e27b3987ab0d69ec64b01_31bf3856ad364e35_6.3.9600.18227_none_74f559e52be4455b.manifest
File versionNot applicable
File size718
Date (UTC)03-Feb-2016
Time (UTC)20:32
PlatformNot applicable
File nameAmd64_microsoft-windows-d..r-service.resources_31bf3856ad364e35_6.3.9600.18227_de-de_a41b27144f20e16d.manifest
File versionNot applicable
File size2,476
Date (UTC)03-Feb-2016
Time (UTC)20:32
PlatformNot applicable
File nameAmd64_microsoft-windows-d..r-service.resources_31bf3856ad364e35_6.3.9600.18227_en-us_4d0bfd0d3dfeed32.manifest
File versionNot applicable
File size2,476
Date (UTC)03-Feb-2016
Time (UTC)20:32
PlatformNot applicable
File nameAmd64_microsoft-windows-d..r-service.resources_31bf3856ad364e35_6.3.9600.18227_es-es_4cd759f13e25ded7.manifest
File versionNot applicable
File size2,476
Date (UTC)03-Feb-2016
Time (UTC)20:32
PlatformNot applicable
File nameAmd64_microsoft-windows-d..r-service.resources_31bf3856ad364e35_6.3.9600.18227_fr-fr_ef8ecff030f7f539.manifest
File versionNot applicable
File size2,476
Date (UTC)03-Feb-2016
Time (UTC)20:32
PlatformNot applicable
File nameAmd64_microsoft-windows-d..r-service.resources_31bf3856ad364e35_6.3.9600.18227_it-it_d9b6c6370829dab7.manifest
File versionNot applicable
File size2,476
Date (UTC)03-Feb-2016
Time (UTC)20:32
PlatformNot applicable
File nameAmd64_microsoft-windows-d..r-service.resources_31bf3856ad364e35_6.3.9600.18227_ja-jp_7bdc4543fb44ec92.manifest
File versionNot applicable
File size2,476
Date (UTC)03-Feb-2016
Time (UTC)20:32
PlatformNot applicable
File nameAmd64_microsoft-windows-d..r-service.resources_31bf3856ad364e35_6.3.9600.18227_ko-kr_1f4621f8edb5b3a8.manifest
File versionNot applicable
File size2,476
Date (UTC)03-Feb-2016
Time (UTC)20:32
PlatformNot applicable
File nameAmd64_microsoft-windows-d..r-service.resources_31bf3856ad364e35_6.3.9600.18227_pt-br_4ea83391aab2ead1.manifest
File versionNot applicable
File size2,476
Date (UTC)03-Feb-2016
Time (UTC)20:32
PlatformNot applicable
File nameAmd64_microsoft-windows-d..r-service.resources_31bf3856ad364e35_6.3.9600.18227_ru-ru_962d14c18f03e8d9.manifest
File versionNot applicable
File size2,476
Date (UTC)03-Feb-2016
Time (UTC)20:32
PlatformNot applicable
File nameAmd64_microsoft-windows-d..r-service.resources_31bf3856ad364e35_6.3.9600.18227_zh-cn_ac92677b2520c744.manifest
File versionNot applicable
File size2,476
Date (UTC)03-Feb-2016
Time (UTC)20:32
PlatformNot applicable
File nameAmd64_microsoft-windows-d..r-service.resources_31bf3856ad364e35_6.3.9600.18227_zh-hk_ab3d600925fc39d4.manifest
File versionNot applicable
File size2,476
Date (UTC)03-Feb-2016
Time (UTC)20:32
PlatformNot applicable
File nameAmd64_microsoft-windows-d..r-service.resources_31bf3856ad364e35_6.3.9600.18227_zh-tw_b08ea4d12291a3b4.manifest
File versionNot applicable
File size2,476
Date (UTC)03-Feb-2016
Time (UTC)20:32
PlatformNot applicable
File nameAmd64_microsoft-windows-dns-server-service_31bf3856ad364e35_6.3.9600.18227_none_3f07f670aa5879f9.manifest
File versionNot applicable
File size287,181
Date (UTC)03-Feb-2016
Time (UTC)17:01
PlatformNot applicable
File nameUpdate.mum
File versionNot applicable
File size16,888
Date (UTC)03-Feb-2016
Time (UTC)20:32
PlatformNot applicable
Note This is a "FAST PUBLISH" article created directly from within the Microsoft support organization. The information contained herein is provided as-is in response to emerging issues. As a result of the speed in making it available, the materials may include typographical errors and may be revised at any time without notice. See Terms of Use for other considerations.
Properties

Article ID: 3133954 - Last Review: 04/12/2016 20:13:00 - Revision: 2.0

Windows Server 2012 R2 Datacenter, Windows Server 2012 R2 Standard, Windows Server 2012 R2 Essentials, Windows Server 2012 R2 Foundation

  • kbsurveynew atdownload kbexpertiseadvanced kbfix KB3133954
Feedback