>
> 2) When I tried a test master BIND in a VM, there was not enough entropy
> to generate DNSSEC keys.
Entropy has been discussed frequently on this list. As a quick
workaround, I recommend running http://www.issihosts.com/haveged/
-JP