On 22/07/2020 15:30, Josef Moellers wrote: >> Or just ignore the warning, and let BIND use its built-in keys. > > If /etc/bind.keys contains some additional keys, this will not work ;-) Sure, but what additional keys do you expect this file to contain? Are you serving an alternate signed root zone?