i need to know where i put these 2 lines and weather the second one dnssec-keygen goes into the /etc/bind/named.conf.options on both master and slave or just the slave and if i need any special characters or do i just include it into the file as is cause i noticed that when i do this and run a named-checkconf i get two error on those 2 lines For both master AND slave edit /etc/bind/named.conf.options and add: dnssec-enable yes; Now we need a secure key. This will generate a .private and a .key file. The 'key=' line in the .private file represents the hashkey. dnssec-keygen -a hmac-md5 -b 128 -n host linux.lan Your help is much appreciated!!