# signing key parameters KSK_lifetime: 60d # (5184000 seconds) KSK_algo: DSA KSK_bits: 1024 KSK_randfile: "/dev/urandom"