Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

Does anybody know why the DNSKEY RRsigs are not re-signed with dynamic update??


share|improve this question

Are you using BIND 9.7? If you want BIND 9.7 to automatically re-sign a zone after a dynamic update you need to add "auto-dnssec maintain" to the zone file definition.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.