hi Randy,
Mar 20, 2024 07:47:49 Randy Bush via knot-dns-users <knot-dns-users(a)lists.nic.cz>cz>:
...
i did generate keying as i would when signing a primary zone
# keymgr sld.tld generate algorithm=rsasha256 ksk=yes zsk=yes
7a618eaf94ea1d903233cb547faa24bae8cb49a5
# knotc zone-reload sld.tld
OK
After generating any keys you would need "knotc reload" I believe (instead of
zone-reload).
Please send the error message you got if this does not help.
Regards,
Tamás