On 24 aug 2010, at 23.41, =JeffH wrote: > note the "algorithm is unsupported" error msg from dnssec-dsfromkey. > > the dnssec-dsfromkey version I'm using is 9.6.1-P2. As the root is signed with RSA/SHA-256, you need BIND 9.6.2 or later to validate signatures. jakob -- Jakob Schlyter Kirei AB - www.kirei.se