| Hostname | IP Address | Status | Assigned To | Last Scan | Actions |
|---|---|---|---|---|---|
| MONT-DC-003 | 164.231.187.34 | 2026-01-14 | |||
Finding DetailsEvaluate-STIG 1.2507.5 (Scan-WindowsServerDNS_Checks) found this to be NOT APPLICABLE on 10/23/2025 ResultHash: A14A79735BD283F3F019111E748C74455976803D ~~~~~ All zones hosted on this server are Active Directory-integrated so this requirement is NA. Comments |
|||||
Check Text
This check is not applicable for Windows DNS Servers that only host Active Directory-integrated zones or for Windows DNS servers on a classified network. Review the DNS name server and documentation to determine if it accepts dynamic updates. If dynamic updates are not accepted, verify the private keys corresponding to both the ZSK and KSK are not located on the name server. If the private keys to the ZSK and/or the KSK are located on the name server, this is a finding.
Fix Text
Store the private keys of the ZSK and KSK offline in an encrypted file system.