"auto-dnssec maintain;" and key "missing or inactive and has no replacement"

Stephane Bortzmeyer bortzmeyer at nic.fr
Fri Jul 26 13:37:46 UTC 2013

On Fri, Jul 26, 2013 at 08:52:04AM +0200,
 Stephane Bortzmeyer <bortzmeyer at nic.fr> wrote 
 a message of 24 lines which said:

> Yes. I tested with two keys, a KSK and a ZSK and the warning
> disappears.

Another solution, even if using only one key, is to add:

	update-policy local; # Necessary, says the ARM (otherwise, you cannot freeze/thaw)

in the zone configuration. Apparently, it worked without it but, when
you use it, there is no longer this undecipherable warning.

More information about the bind-users mailing list