naïvely, i upgraded a freebsd system from 11.2 to 11.3 and found that i was forced to migrate opendnssec from 1.4 to 2.1. i followd the instructions, and it worked. shocked, i tell you, shocked. thank you! randy