SWITCH has implemented a method (RFC 7344, 8078) to allow DNS operators to automatically update DNSSEC keys at the registry as opposed to manual updates through a registrar interface. This presentation will provide details about the implementation and a demonstration of securing a zone with one command.