DNSSEC - Generating Keys

Each zone (domain) in the DNS will need to have a key pair. The zone's public key will be included in its resource records. The zone's private key will be kept securely by the administrator of the zone, and never given to anyone outside your organization. The dnskey program can generate and display DNS keys.
Next page: Signing Your Zone; Up: Domain Name System Security home page