ncd /export/zonedb/ (contains zone file and private
keys)
ncat
Ksub.tld.+5+12345.key > keyset-sub.tld.
ndnssec-signzone Šk
Ktld.+5+3215 tld Ktld.+5+9823 (3215 is key signing key, 9823 is zone signing
key)
n
nThe signer will automatically generate the DS RRs.
nAlternatively you can use a tool to generate the
DS RRs from your key database.
n