DNSSEC - Zone Signing and Key Signing Keys

I'm looking into using DNSSEC for our Wide-Ips. I've got the signing working for our UAT records but now I'm more interested in the best practices for the Zone Signing and Key Signing Keys as well a...