<!--
 - Copyright (C) Internet Systems Consortium, Inc. ("ISC")
 -
 - This Source Code Form is subject to the terms of the Mozilla Public
 - License, v. 2.0. If a copy of the MPL was not distributed with this
 - file, You can obtain one at http://mozilla.org/MPL/2.0/.
 -
 - See the COPYRIGHT file distributed with this work for additional
 - information regarding copyright ownership.
-->

<!-- Generated by doc/misc/docbook-options.pl -->

<programlisting>
<command>dnssec-policy</command> <replaceable>string</replaceable> {
    <command>dnskey-ttl</command> <replaceable>duration</replaceable>;
    <command>keys</command> { ( csk | ksk | zsk ) key-directory lifetime ( <replaceable>duration</replaceable> | unlimited ) algorithm <replaceable>integer</replaceable> [ <replaceable>integer</replaceable> ] ; ... };
    <command>max-zone-ttl</command> <replaceable>duration</replaceable>;
    <command>parent-ds-ttl</command> <replaceable>duration</replaceable>;
    <command>parent-propagation-delay</command> <replaceable>duration</replaceable>;
    <command>parent-registration-delay</command> <replaceable>duration</replaceable>;
    <command>publish-safety</command> <replaceable>duration</replaceable>;
    <command>retire-safety</command> <replaceable>duration</replaceable>;
    <command>signatures-refresh</command> <replaceable>duration</replaceable>;
    <command>signatures-validity</command> <replaceable>duration</replaceable>;
    <command>signatures-validity-dnskey</command> <replaceable>duration</replaceable>;
    <command>zone-propagation-delay</command> <replaceable>duration</replaceable>;
};
</programlisting>

