One other suggestion that I’ve seen it that you should switch to another terminal window on the server and run some commands that make some work on the server, to make it fill up the default /dev/random.
If you have followed the steps in my previous post you might have your zone database files in /etc/bind/zones.
This did not seem to have any effect on the records. I got an IP address for the DHCP server and saw the hostname. Next I changed the IP address from dhcp to a static one and specified the proper DNS servers.
It has been about 45 minutes and DNS still shows the old ip address in the forward lookup zone.
I’ve seen some pointers about that this will generate a less secure key.
But for me the dnssec-keygen would just halt without that parameter.