Configuring Bind9 to Use Signed Zone File

Using RSA Reference File

  1. Once the zone signing is done, you need to make changes in the configuration file named.conf as below.

10_10.1.1_RSA_named.conf-20260709-110706.png


Diff details of named.conf

  1. Stop the Bind9 service.

10_10.1.2_stop_Bind9-20260708-061745.png


Stop Bind9

  1. Start the Bind9 service using the command below and verify the signed zone is loaded successfully.

›_ Console

/usr/local/sbin/named -f -4 -g -c /usr/local/etc/named.conf
10_10.1.2_start_Bind-20260708-061808.png


Start Bind9

  1. Verify the Bind9 startup logs and confirm the signed zone is loaded successfully.

Using ECC Reference File

1. Make changes in the configuration file named.conf as below.

10_10.2.1_ECC_named.conf-20260709-152515.png

Diff details of file named.conf

  1. Stop the Bind9 service.

10_10.2.2_stop_Bind9-20260708-065606.png


Stop Bind9

  1. Start the Bind9 service using the command below and verify the signed zone is loaded successfully.

›_ Console

/usr/local/sbin/named -f -4 -g -c /usr/local/etc/named.conf
10_10.2.2_start_Bind9-20260708-065714.png


Start Bind9