The most obvious thing is to look at the zone and see if that key is included in an allow-update statement for the zone. Bob -------------- next part -------------- An HTML attachment was scrubbed... URL: <https://lists.isc.org/pipermail/bind-users/attachments/20190520/0b4b3eb0/attachment.html>