Are you using BIND 9.7? If you want BIND 9.7 to automatically re-sign a zone after a dynamic update you need to add "auto-dnssec maintain" to the zone file definition.
This is a collaboratively edited question and answer site for system administrators and desktop support professionals. It's 100% free, no registration required.
Got a question about the site itself? meta is the place to talk about things like what questions are appropriate, what tags we should use, etc.