Dnssec deployment

Step to configur dnssec

1.create ksk and zsk

2.create zone sec

3. Register ds record to registrar

i have config sync gtm and intermitten, anybody know what the problem is because i have dc and drc device with config sync ? And how to rolleover ksk with automatic, should i register again ds on step3

Hi @Anzine321    For good reference on the setup please check out DNSSEC, for the most part make sure NTP is working across all devices in the sync-group and there is no time drift.  I am not sure what is intermittent, but as per this doc--->  DNS objects are synchronized  DNSSEC zone/keys are synchronized.  To help with debugging DNSSEC issues check this out DNSSEC Debugging