Thank you Stephane and Hauke; this latest iteration appears to work fine. I now have root-anchors.mkey and root-anchors.dnskey; where do I put them, and how do I incorporate them into unbound.conf? TIA