First Key Generation

On November 18th 2011, NZRS carried out the First Key Generation Procedure. During this event, the cryptographic keys required to sign the .nz zones with DNSSEC were created.

The procedure followed a defined script, which can be found here [PDF]. The script details the materials used, the participants, the time tracking and the technical steps taken to protect the key material. We also captured the console output as a text file, and generated a pretty output as PostScript [PS] and [PDF].

The completion of this procedure will enable NZRS to sign the .nz zone according to schedule.

 

File 386The participants during the Key Generation.

File 385Once the procedure has been completed.