1. rndc freeze . 2. cat dsset-* >>root.zone // or put them in an include file rewritten each time) 3. rndc thaw . 4. rndc sign . (or use nsupdate -l) Place the root key ready to download