ARM9.5 still mentions manual generation of TSIG data: https://www.isc.org/software/bind/documentation/arm95#tsig Is there any advtantage to using -keygen ? ISTR some mention of an algorithm used to minimize the possibility of collisions. Or is that true for any key used with HMAC? Justin