running rndc-confgen –a to generate a key that can be used by both the named service and the rndc utility

running rndc-confgen –a to generate a key that can be used only by the named service

running rndc –k /etc/rndc.key to generate a key to be used only by the rndc utility

the presence of /etc/named.conf with the line include "/etc/rndc.key"; to allow the named service to check for a matching key from the rndc utility