Plesk does not update BIND zones

Symptoms

Plesk does not update BIND zones.

When DNS is changed via Plesk, changes are not applied to BIND.

CLI utility fails with the following error:

Cannot update zone using Plesk utility:

# /opt/psa/admin/sbin/dnsmng --update example.com
dnsmng: Error: unable to reload BIND service
dnsmng: Error: unable to reload BIND service

BIND cannot be reloaded manually:

# service bind9 reload
[....] Reloading domain name service...: bind9rndc: connection to remote host closed
This may indicate that
* the remote server is using an older version of the command protocol,
* this host is not authorized to connect,
* the clocks are not synchronized, or
* the key is invalid.
failed!

Cause

Incorrect key specified in /etc/named.conf

OR:

Localhost has no control privileges for BIND.

Resolution

1. Log in to the server via SSH .

2. Ensure that file /etc/bind/rndc.key exists and have:

# vi /etc/bind/rndc.key
...
     key rndc-key {
         algorithm hmac-md5;
         secret "somesecret";
     };
...

And also there is a proper section in /etc/named.conf :

# vi /etc/named.conf
...
     key rndc-key {
         algorithm hmac-md5;
         secret "somesecret";
     };

         controls {
         inet * port someport allow { 127.0.0.1;} keys {rndc-key;};
         };
...