Aller au contenu Aller au menu principal Aller au menu secondaire Aller au pied de page
  • DNS
  • CYBERSECURITY

Parcours Manage and Secure DNS

Training : Securing your DNS infrastructure with DNSSEC

Last updated on : 6th October 2025

Home > Products and services > Our training courses > Securing your DNS infrastructure with DNSSEC
  • 2 days
  • Distanciel

Rate : €1,600 excl. tax per participant

The DNS is a strategic infrastructure, since all internet services for companies, associations and public organisations depend on it. Implementing DNSSEC allows you to secure this key infrastructure.

Description and aims of the training course

This training course will enable you to protect your customers and your own infrastructures against any security problems that might penalise your activities. You will learn how to deploy this delicate extention that require advanced technical knowledge and a rigorous exploitation.

You will be able to:

  • Assess the benefits of DNSSEC before deploying it in your environment
  • Acquire the knowledge needed for a successful DNSSEC extension configuration
  • Operate a resolver (Unbound) to validate responses with DNSSEC
  • Build a DNSSEC infrastructure with OpenDNSSEC and manage the keys and BIND to serve the signed zones

Duration

2 days

Target audience

Registrars, DNS hosts, professionals of security and the DNS.

Prerequisites

  • Knowledge of the basics of the DNS
  • Familiarity with the UNIX operating system and the TCP/IP network protocols
  • At least one year’s experience in the domain name administration business

Trainer

Stéphane Bortzmeyer, DNS expert & R&D Engineer, Afnic

Training location

The training course is given online via our video conferencing tool.
The link to connect will be sent to you once your registration is finalized.

Assessment

Practical exercises will be carried out throughout the course to help assimilate the methods and concepts presented.

Cost

€1,600 excl. tax per participant
For group enrolment, please contact us for a quotation.

Booking details

Bookings are possible up to 5 working days prior to the session.

Last updated on 30th September 2025

View training program

Day 1 – Morning: Reminder of the basics

  • Functioning of the DNS
  • Security of the DNS and associated risks
  • Cryptography
  • Contributions of DNSSEC

Day 1 – Afternoon: Presentation of DNSSEC

  • Keys and DNSKEY records
  • Signing of records
  • Secure delegation
  • Proof of non-existence: NSEC and NSEC3 records

Day 2 – Morning: DNSSEC in practice

  • Protocol details
    • DO bit and transport (EDNS)
    • Problems associated with firewalls
  • Creation of a zone signed manually
    • Validation using Unbound
    • Verifying with DIG and DELV
    • Identifying the causes of a problem
    • Performing tests with Zonemaster and DNSVIZ
  • Delegation of a zone
  • Renewal of keys

Day 2 – Afternoon: Practical exercises and feedback

  • Creation of a signed zone with OpenDNSSEC
  • DNSSEC feedback
    • In the root zone
    • For Top-Level Domains
    • Ordinary zones signed
    • Storage of keys and HSMs
    • Frequently encountered operational problems

DIRECCTE declaration number: 11788446878

  • 2 days
  • Distanciel

Rate : €1,600 excl. tax per participant

PDF format

Need further information on tailoring a training course to your needs?

Contact us

Tailor-made training

Our experts can adapt to your needs and devise a custom training course. For group enrolment, please contact us for a custom quotation.

Specific arrangements

Afnic places great importance on inclusion of people with a disability. If you require any specific arrangements, please contact us before registering to discuss your proposal (programme, adapted materials, specific needs in terms of accessibility or organisation, etc.).

Certification

Afnic is QUALIOPI® certified as a training organisation.

View our Qualiopi certificat (PDF 141 Ko)
Contact us

Other training courses you may be interested in

  • DNS
  • CYBERSECURITY

Securing your email thanks to the DNS with DKIM, DMARC, SPF

Email is currently a medium much favoured by scammers: spam, phishing and various other scams. DKIM, DMARC and SPF are three sender authentication techniques currently found in the toolbox of organisations seeking to combat these forms of online abuse.

  • 2 days
  • Distanciel
  • Next session: From 9th October to 10th October 2025
  • NETWORK

Understanding and deploying IPv6

The old version of the Internet Protocol, IPv4, has been such a success that we are now faced with a shortage of available addresses. This has the effect of heavily penalising new entrants as well as other players who no longer have enough IPv4 addresses. Maintaining IPv4 is also proving more and more costly for businesses. It is therefore advisable to migrate to the new version of the protocol (IPv6) in order to manage a scalable and extensible pool of IP addresses.

  • 2 days
  • Distanciel
  • Next session: From 4th December to 5th December 2025
  • CYBERSECURITY
  • DNS
  • NETWORK
  • NEW

DNS Administrator

For some years now, both public and private actors have been seeing certain Internet services become inaccessible on account of problems linked to their DNS hosting. These breakdowns have considerable consequences: clients unable to access their bank accounts, online stores inaccessible, public services closed, etc. The robustness of DNS services generally suggests that Internet services are functioning normally; so, without a suitable DNS administration, an organisation can become extremely vulnerable. It is essential for any organisation to have skilled administration that allows it to maintain a comprehensive, high-quality DNS service, whether it is hosted in-house or entrusted to a hosting service provider.

  • 2 days
  • Distanciel
  • Next session: From 16th October to 17th October 2025

Securing your DNS infrastructure with DNSSEC

* Required fields

You can add up to 20 participants


Want to register for one or more training courses in our catalogue?