Documentation update - use of "-E pkcs11"
The "named" man page but could be updated to specify that the engine-name is mandatory when using Bind not build with pkcs11 support.
-E engine-name When applicable, specifies the hardware to use for cryptographic operations, such as a secure key store used for signing. When BIND is built with OpenSSL PKCS#11 support, this defaults to the string “pkcs11”, which identifies an OpenSSL engine that can drive a cryptographic accelerator or hardware service module. When BIND is built with native PKCS#11 cryptography (–enable-native-pkcs11), it defaults to the path of the PKCS#11 provider library specified via “–with-pkcs11”.
ARM: 5.11 PKCS#11 (Cryptoki) support This text could be updated: to refer to or include : https://gitlab.isc.org/isc-projects/bind9/-/wikis/BIND-9-PKCS11