Breadcrumbs

Configuring Bind9 to use signed zone file

  1. Once the zone signing is done, you need to make changes in configuration file named.conf as below.

named.conf

 
# vi /usr/local/etc/named.conf 
... 
        dnssec-validation yes; 
... 

zone "example.net" { 
        type primary; 
        file "example.net.signed"; 
};

  1. Stop and start the bind9 service using the command below.

›_ Console 

# /usr/local/sbin/named -f -4 -E pkcs11 -c /usr/local/etc/named.conf

  1. Verify log file /var/log/messages shows the signed zone is loaded successfully.

›_ Console 

“zone example.net/IN: loaded serial 0 (DNSSEC signed) 

Jun 13 09:06:57 SP-Bind9 named[25122]: all zones loaded 
Jun 13 09:06:57 SP-Bind9 named[25122]: running

tmpt_tg9b4t.jpg

Log output