Changes to named.conf

"dnssec-enable" option
    options {
        dnssec-enable yes;
    };
Change the zone file name to "xxx.signed"
    zone "sec.jinmei.org" {
        type master;

        // was sec.jinmei.org before signing
        file "sec.jinmei.org.signed";
    };