dnssec-keygen

[Cinense, Mark]

Does anyone know how to use dnssec-keygen.  I tried following the example in
the latest edition of BIND, and yet I get this.  I am working with BIND
9.1.3, and I am trying to configure rndc to work with this setup.

# dnssec-keygen -a HMAC-MD5 -b 128 HOST sadl7238.domain
Ksadl7238.domain+157+28446
dnssec-keygen: extraneous arguments

I am not sure what I am doing, right or wrong.

Thanks, 

Mark