diff --git a/templates/named.conf.erb b/templates/named.conf.erb
index a69f4ef..66ff11a 100644
--- a/templates/named.conf.erb
+++ b/templates/named.conf.erb
@@ -28,7 +28,6 @@ options {
 <%- end -%>
 	auth-nxdomain <%= @auth_nxdomain ? 'yes' : 'no' %>;
 	listen-on-v6 { any; };
-	dnssec-enable <%= @dnssec ? 'yes' : 'no' %>;
 <%- if @filter_ipv6 -%>
 	filter-aaaa-on-v4 yes;
 <%- end -%>
@@ -38,6 +37,8 @@ options {
 <%-   if @isc_bind_keys -%>
         bindkeys-file "<%= @isc_bind_keys %>";
 <%-   end -%>
+<%- else - %>
+	dnssec-validation no;
 <%- end -%>
 <%- if @version != '' -%>
 	version "<%= @version %>";