diff --git a/install/tpl/named.conf.options.master b/install/tpl/named.conf.options.master
index 4f001960bf1b23917146bae849f23cf80487fb2b..588488c1815e82587b2113953040e3f1138b8ea6 100644
--- a/install/tpl/named.conf.options.master
+++ b/install/tpl/named.conf.options.master
@@ -18,11 +18,9 @@ options {
 	// If BIND logs error messages about the root key being expired,
 	// you will need to update your keys.  See https://www.isc.org/bind-keys
 	//========================================================================
-	dnssec-enable yes;
-	dnssec-validation yes;
 
 	version "unknown";
-	
+
 	allow-transfer {none;};
 
 	auth-nxdomain no;    # conform to RFC1035