diff --git a/dns/rfc2136/Makefile b/dns/rfc2136/Makefile
index 9a1a3618e..54f5bd4da 100644
--- a/dns/rfc2136/Makefile
+++ b/dns/rfc2136/Makefile
@@ -1,6 +1,5 @@
 PLUGIN_NAME=		rfc2136
-PLUGIN_VERSION=		1.6
-PLUGIN_REVISION=	3
+PLUGIN_VERSION=		1.7
 PLUGIN_COMMENT=		RFC-2136 Support
 PLUGIN_MAINTAINER=	franco@opnsense.org
 PLUGIN_DEPENDS=		bind-tools
diff --git a/dns/rfc2136/src/etc/inc/plugins.inc.d/rfc2136.inc b/dns/rfc2136/src/etc/inc/plugins.inc.d/rfc2136.inc
index 8858cde0c..b399dfe76 100644
--- a/dns/rfc2136/src/etc/inc/plugins.inc.d/rfc2136.inc
+++ b/dns/rfc2136/src/etc/inc/plugins.inc.d/rfc2136.inc
@@ -125,9 +125,10 @@ function rfc2136_configure_do($verbose = false, $int = '', $updatehost = '', $fo
            but nsupdate insists on having both */
         $fd = fopen("/var/etc/K{$i}{$keyname}+157+00000.private", "w");
         $privkey = <<<EOD
-Private-key-format: v1.2
-Algorithm: 157 (HMAC)
-Key: {$dnsupdate['keydata']}
+key "{$keyname}" {
+	algorithm hmac-md5;
+	secret "{$dnsupdate['keydata']}";
+};
 
 EOD;
         fwrite($fd, $privkey);