cd /var/cache/bind/ar/edu/unicen/cazul/keys/ 

dnssec-keygen -a RSASHA256 -b 1024 cazul.unicen.edu.ar
dnssec-keygen -a RSASHA256 -b 2048 -f KSK cazul.unicen.edu.ar

chown bind.bind *

Generamos los registros DS en base a la segunda clave (KSK)

dnssec-dsfromkey -a SHA-1 Kcazul.unicen.edu.ar.+008+10756.key
cazul.unicen.edu.ar. IN DS 10756 8 1 006E72C92EDF299E01A2ABB42D6BAB7BF866AF2A

dnssec-dsfromkey -a SHA-256 Kcazul.unicen.edu.ar.+008+10756.key
cazul.unicen.edu.ar. IN DS 10756 8 2 95FD7755C3CE79A529ED2239EAB2857C47847B66CE2226BBA3EA4769D5B1E43F

Copiar los registros DN en la zona de unicen