DNSSEC ZSK Key Rollover for BIND9 Inline Signed Zones When you follow the steps you will have roll the ZSK DNSKEY almost immediately. Don't use the included very short timing settings in production environments but feel free to alter them to fit you needs.