DNSSEC Trust Anchors provide the public keys for trusted zones. Use this option to create a DNSSEC trusted anchor. This option is set at the server level.
When you set this option, you specify a list of fully-qualified domain names and their Key Signing Keys (KSKs). Additionally, you will need the KSKs for the trusted zones from the zone administrators.
Note: DNSSEC Trust Anchors will not be imported from, and cannot be deployed to
Windows Server 2008, and Windows Server 2012 non-R2 servers. Address Manager
does not prevent configuration of DNSSEC options for unsupported versions of
Windows, since Address Manager is not aware of the version of a Managed Windows
Server. Manually adding and attempting to deploy DNSSEC options to an
unsupported version of Windows will result in a deployment error.
To set the DNSSEC Trust Anchors option: