> You need "auto-dnssec maintain" in the zone statement Right, or "auto-dnssec allow". -- Evan Hunt -- each at isc.org Internet Systems Consortium, Inc.