From: Matthijs Mekking <matthijs@isc.org>
Date: Fri, 26 Nov 2021 09:37:06 +0000 (+0100)
Subject: Update auto-dnssec documentation
X-Git-Tag: v9.17.22~13^2~1
X-Git-Url: http://git.ipfire.org/gitweb/?a=commitdiff_plain;h=aac39647f30f39992e29e47f07ef1992db2e242e;p=thirdparty%2Fbind9.git

Update auto-dnssec documentation

Explain that 'auto-dnssec' may only be activated at zone level.
---

diff --git a/doc/arm/reference.rst b/doc/arm/reference.rst
index c7c180bf959..4fc6a5b55c7 100644
--- a/doc/arm/reference.rst
+++ b/doc/arm/reference.rst
@@ -2042,7 +2042,11 @@ Boolean Options
    periodically, regardless of whether ``rndc loadkeys`` is used. The
    recheck interval is defined by ``dnssec-loadkeys-interval``.
 
-   The default setting is ``auto-dnssec off``.
+   ``auto-dnssec off;`` does not allow for DNSSEC key management.
+   This is the default setting.
+
+   This option may only be activated at the zone level; if configured
+   at the view or options level, it must be set to ``off``.
 
 .. _dnssec-validation-option: