bind 9.7, dnssec and multiple key directories and resalt NSEC3

[Phil Mayers]

On 04/06/10 11:11, Tim Verhoeven wrote:
> Hi,
>
> I'm currently testing the automatic signing for DNSSEC present in Bind
> 9.7. I'm currently using Bind 9.7.0 and I have 2 questions.
>
> The first one, can I configure multiple key directories? The reasoning
> for this is that I would like to seperate the KSK's from the ZSK's.
> And this to be able to not have the KSK's present all the time by
> putting them on a removable media. For the ZSK's I have no choice
> since I will be doing dynamic updates.
> Or are there other means to do this except from adding and removing
> the KSK's when needed ?

Symlinks to the KSK in another directory?