how to dynamic update bind9 ?

[Arlen Hing]

I get the error below :
update: info: adding an RR
update: error: could not get zone keys for secure dynamic update
update: error: SIG/NXT update failed: not found
client: debug 3: client 192.168.1.15#1107: update
security: debug 3: client 192.168.1.15#1107: update approved

can you tell me how to give the zone key to secure dynamic update ?
where can I find the standard procedure of secure dynamic update ?



how to get the error :
1. use “dnssec-keygen” to generate the key of DNSSEC.
2. use “dnssec-makekeyset” to produce a set of DNSSEC keys.
3. use “dnssec-signkey” to sign the key from child zone.
4. use “dnssec-signzone” to sign the zone file.

so I get the following file :
Ksub.i.x.+003+44513.key
Ksub.i.x.+003+44513.private
sub.i.x
sub.i.x.keyset
sub.i.x.signed
sub.i.x.signedkey