diff --git a/xCAT-server/sbin/makenamed.conf b/xCAT-server/sbin/makenamed.conf
index 66487f9d9..d481bb76c 100755
--- a/xCAT-server/sbin/makenamed.conf
+++ b/xCAT-server/sbin/makenamed.conf
@@ -62,6 +62,11 @@ for i in $(grep "^nameserver" /etc/resolv.conf | awk '{print $2}')
 do
 	echo "		$i;"
 done >>$FILE
-echo "	};
-};" >>$FILE
+echo "	};" >>$FILE
+BIND_VERSION=$(/usr/sbin/named -v | cut -d" " -f2)
+if [[ $BIND_VERSION > "9.16.5" ]]; then
+        echo "	dnssec-enable no;
+	dnssec-validation no;" >>$FILE
+fi
+echo "};" >>$FILE