Thanks for the reply falko
I'm still having trouble here though
after including these 2 lines in /etc/bind/named.conf.options
dnssec-enable yes;
dnssec-keygen -a hmac-md5 -b 128 -n host linux.lan
and running the named-checkconf command i get this error
/etc/bind/named.conf.options:22: unknown option 'dnssec-enable'
/etc/bind/named.conf.options:23: unknown option 'dnssec-keygen'