Hello, Is it possible to sign the ZSK key permanently with the KSK key? If yes: how to do that? In this way I could keep the KSK key offline. With regards, Paul van der Vlis -- Paul van der Vlis Linux systeembeheer Groningen https://www.vandervlis.nl/