Hi The usage of standby keys is a little bit complicated, and possibly something that you use when you now more about DNSSEC. Should we change the "default" value in kasp.xml to zero? // Rickard