Certificate Services Support

Here is the process:

1. Login to your Windows Server as administrator.

2. Launch PowerShell window by clicking on Windows Icon > Windows PowerShell.



3. Type the following command to get the full listing of your existing zone record:

Get-DnsServerResourceRecord -zonename your_zone_name

NOTE: In this example, the zone name is entrustcertlab.com



4. To add a new CAA record you need to use an UNKNOWN record type. This is because Microsoft Windows does not provide a specific field to add this particular record.

Note: For more information about the introduction of the UNKNOWN record type to support RFC 3597 from Microsoft Windows 2016 Server, go here:
https://docs.microsoft.com/en-us/windows-server/networking/dns/what-s-new-in-dns-server

5. At this point the CAA Record has been added.

You can run a command to review your zone records by typing the same command from step 3. You will see that the UNKNOWN record is now showing along with other previously existing records:
 
Get-DnsServerResourceRecord -zonename your_zone_name

If you have any questions or concerns please contact the Entrust Certificate Services Support department for further assistance: 

Hours of Operation: 
Sunday 8:00 PM ET to Friday 8:00 PM ET 
North America (toll free): 1-866-267-9297 
Outside North America: 1-613-270-2680 (or see the list below) 
NOTE: Smart Phone users may use the 1-800 numbers shown in the table below.
Otherwise, it is very important that international callers dial the UITF format exactly as indicated. Do not dial an extra "1" before the "800" or your call will not be accepted as an UITF toll free call.