DNSSEC-SETTIME(1) BIND 9 DNSSEC-SETTIME(1) (NAME) dnssec-settime - DNSSEC (SYNOPSIS) dnssec-settime [-f] [-K directory] [-L ttl] [-P date/offset] [-P ds date/offset] [-P sync date/offset] [-A date/offset] [-R date/offset] [-I date/offset] [-D date/offset] [-D ds date/offset] [-D sync date/offset] [-S key] [-i interval] [-h] [-V] [-v level] [-E engine] {keyfile} [-s] [-g state] [-d state date/offset] [-k state date/offset] [-r state date/offset] [-z state date/offset] (DESCRIPTION) dnssec-settime DNSSEC -P -A -R -I -D . dnssec-signzone <#std-iscman- dnssec-signzone> (zone) . dnssec-settime . (Knnnn.+aaa+iiiii.key Knnnn.+aaa+iiiii.private) . (private) . (.key) . ( 0600). (state files) -s . -d ( DS) -k ( DNSKEY) -r ( RRSIG KSK) -z ( RRSIG ZSK) . HIDDEN RUMOURED OMNIPRESENT UNRETENTIVE. (goal state) -g . HIDDEN OMNIPRESENT . (NOT RECOMMENDED). (OPTIONS) -f ( ) . dnssec-settime . . . . -K directory . -L ttl TTL DNSKEY RR . TTL (RRset) DNSKEY TTL . DNSKEY TTL TTL SOA . TTL 0 none . -h . -V . -v level (debugging) . -E engine . BIND 9 OpenSSL OpenSSL ( pkcs11). (TIMING OPTIONS) YYYYMMDD YYYYMMDDHHMMSS ( ) 'Day Mon DD HH:MM:SS YYYY' ( dnssec-settime -p ) (UNIX epoch time dnssec-settime -up ) now . + - () . now . y mo w d h mi ( ) ( ) . . none never unset . . -P date/offset . . ds date/offset DS (parent zone) . sync date/offset CDS CDNSKEY . -A date/offset . . -R date/offset (revoked) . . . -I date/offset () . . -D date/offset . ( ). ds date/offset DS . sync date/offset CDS CDNSKEY . -S predecessor key (explicit successor) . (predecessor) . . (prepublication interval) . -i interval (prepublication interval) . . . . y mo w d h mi . . (KEY STATE OPTIONS) dnssec-policy . HIDDEN RUMOURED OMNIPRESENT UNRETENTIVE. -s . -g state (goal state) . HIDDEN OMNIPRESENT . -d state date/offset DS ( ) . -k state date/offset DNSKEY ( ) . -r state date/offset RRSIG (KSK) ( ) . -z state date/offset RRSIG (ZSK) ( ) . (PRINTING OPTIONS) dnssec-settime . -u (Unix epoch) . -p C/P/Pds/Psync/A/R/I/D/Dds/Dsync/all . -p : C P Pds DS Psync CDS CDNSKEY A R I D Dds DS Dsync CDS CDNSKEY. all . (SEE ALSO) dnssec-keygen(8) <#std-iscman-dnssec-keygen>, dnssec-signzone(8) <#std- iscman-dnssec-signzone>, BIND 9 Administrator Reference Manual, RFC 5011 . (AUTHORS) Internet Systems Consortium (COPYRIGHT) 2026, Internet Systems Consortium 9.20.27 2026-08-19 DNSSEC-SETTIME(1)