dnssec-makekeyset

dnssec-makekeyset [options] key-identifiers

System administration command. Generate a domain keyset from one or more DNS Security keys generated by dnssec-keygen. Keysets can be sent to parent zone administrators to be signed with the zone key. The keyset is written to a file with the name keyset-domainname. For more information on Secure DNS, see DNS and BIND (O'Reilly), or read RFC 2535.