Before proceeding, wait for the parent zone the publish the DS
record. This may be found by using the dig command to
retrieve the zone's DS record. The aa
flag in the result must be set and the
ANSWER section must not be empty.
You may continue if the DS record is the same as the value in the file generated in Chapter 3, Initially Signing a Zone or Chapter 6, Resigning a Zone.
# dig @server-IP-address DS zone-name
[ENTER]
; <<>> DiG 9.3.0 <<>> ...
... ;; flags: qr aa rd; QUERY: 1, ANSWER: 1, AUTHORITY: 1, ADDITIONAL: 0
... ;;ANSWER SECTION: zone-name 600 IN DS 12960 5 1 5B10E822B935BC64DBEC2872A553EAA290443064
; This value must match the data in your dsset-zone-name file.