KZONESIGN(1) Knot DNS KZONESIGN(1) (NAME) kzonesign - DNSSEC (SYNOPSIS) kzonesign [config_option] [options] zone_name (DESCRIPTION) . DNSSEC . ( policy.signing-threads zone.adjust-threads ). (Parameters) zone_name . (Config options) -c, --config file ( /etc/knot/knot.conf ). -C, --confdb directory ( /var/lib/knot/confdb ). . (OPTIONS) -o, --outdir dir_name . -r, --rollover (roll-over) (re-salt) NSEC3. KSK active KSK keymgr <> (+0) . -v, --verify () . -t, --time timestamp / ( ) (timestamp) . -h, --help . -V, --version . -VV . (EXIT VALUES) 0 . . (SEE ALSO) knot.conf(5), keymgr(8). (AUTHOR) CZ.NIC, z.s.p.o. and contributors (COPYRIGHT) Copyright (C) CZ.NIC, z.s.p.o. and contributors 3.5.5 2026-06-12 KZONESIGN(1)