> > 2) When I tried a test master BIND in a VM, there was not enough entropy > to generate DNSSEC keys. Entropy has been discussed frequently on this list. As a quick workaround, I recommend running http://www.issihosts.com/haveged/ -JP