diff --git a/bin/tests/system/additional/ns3/named.conf.in b/bin/tests/system/additional/ns3/named.conf.in
index f47a380628..96c5badefa 100644
--- a/bin/tests/system/additional/ns3/named.conf.in
+++ b/bin/tests/system/additional/ns3/named.conf.in
@@ -22,11 +22,10 @@ options {
 	listen-on { 10.53.0.3; };
 	listen-on-v6 { none; };
 	recursion yes;
-	dnssec-validation yes;
+	dnssec-validation no;
 	minimal-responses no;
 };
 
-trust-anchors { };
 
 zone "." {
 	type hint;
diff --git a/bin/tests/system/cacheclean/ns2/named.conf.j2 b/bin/tests/system/cacheclean/ns2/named.conf.j2
index 418209cf04..c7613457d6 100644
--- a/bin/tests/system/cacheclean/ns2/named.conf.j2
+++ b/bin/tests/system/cacheclean/ns2/named.conf.j2
@@ -22,10 +22,9 @@ options {
 	notify yes;
 	disable-empty-zone 127.IN-ADDR.ARPA;
 	recursion yes;
-	dnssec-validation yes;
+	dnssec-validation no;
 };
 
-trust-anchors { };
 
 key rndc_key {
 	secret "1234abcd8765";
diff --git a/bin/tests/system/chain/ns1/named.conf.in b/bin/tests/system/chain/ns1/named.conf.in
index 95ccf89206..9eb96b61c4 100644
--- a/bin/tests/system/chain/ns1/named.conf.in
+++ b/bin/tests/system/chain/ns1/named.conf.in
@@ -20,10 +20,9 @@ options {
 	listen-on { 10.53.0.1; };
 	listen-on-v6 { none; };
 	recursion no;
-	dnssec-validation yes;
+	dnssec-validation no;
 	notify yes;
 };
 
-trust-anchors { };
 
 zone "." { type primary; file "root.db"; };
diff --git a/bin/tests/system/chain/ns7/named.conf.in b/bin/tests/system/chain/ns7/named.conf.in
index 751521ba0c..1d5a49ad80 100644
--- a/bin/tests/system/chain/ns7/named.conf.in
+++ b/bin/tests/system/chain/ns7/named.conf.in
@@ -22,7 +22,7 @@ options {
 	listen-on-v6 { fd92:7065:b8e:ffff::7; };
 	recursion yes;
 	allow-recursion { any; };
-	dnssec-validation yes;
+	dnssec-validation no;
 	deny-answer-aliases {
 		"example";
 	} except-from {
@@ -31,7 +31,6 @@ options {
 	qname-minimization disabled;  // Regression test for GL #4652
 };
 
-trust-anchors { };
 
 key rndc_key {
 	secret "1234abcd8765";
diff --git a/bin/tests/system/checknames/ns2/named.conf.j2 b/bin/tests/system/checknames/ns2/named.conf.j2
index 105a88dd5f..3fff4fc06e 100644
--- a/bin/tests/system/checknames/ns2/named.conf.j2
+++ b/bin/tests/system/checknames/ns2/named.conf.j2
@@ -20,12 +20,11 @@ options {
 	listen-on { 10.53.0.2; };
 	listen-on-v6 { none; };
 	recursion yes;
-	dnssec-validation yes;
+	dnssec-validation no;
 	check-names response warn;
 	notify yes;
 };
 
-trust-anchors { };
 
 zone "." {
 	type hint;
diff --git a/bin/tests/system/checknames/ns3/named.conf.j2 b/bin/tests/system/checknames/ns3/named.conf.j2
index 487cecca28..738a06bf3a 100644
--- a/bin/tests/system/checknames/ns3/named.conf.j2
+++ b/bin/tests/system/checknames/ns3/named.conf.j2
@@ -20,12 +20,11 @@ options {
 	listen-on { 10.53.0.3; };
 	listen-on-v6 { none; };
 	recursion yes;
-	dnssec-validation yes;
+	dnssec-validation no;
 	check-names response fail;
 	notify yes;
 };
 
-trust-anchors { };
 
 zone "." {
 	type hint;
diff --git a/bin/tests/system/checknames/ns4/named.conf.j2 b/bin/tests/system/checknames/ns4/named.conf.j2
index 7b121fe634..15c2db829b 100644
--- a/bin/tests/system/checknames/ns4/named.conf.j2
+++ b/bin/tests/system/checknames/ns4/named.conf.j2
@@ -21,13 +21,12 @@ options {
 	listen-on-v6 { none; };
 	allow-transfer { any; };
 	recursion yes;
-	dnssec-validation yes;
+	dnssec-validation no;
 	check-names primary ignore;
 	check-names secondary ignore;
 	notify yes;
 };
 
-trust-anchors { };
 
 zone "." {
 	type hint;
diff --git a/bin/tests/system/checknames/ns5/named.conf.j2 b/bin/tests/system/checknames/ns5/named.conf.j2
index 62c870bf7c..489e3a5e1c 100644
--- a/bin/tests/system/checknames/ns5/named.conf.j2
+++ b/bin/tests/system/checknames/ns5/named.conf.j2
@@ -21,13 +21,12 @@ options {
 	listen-on-v6 { none; };
 	allow-transfer { any; };
 	recursion yes;
-	dnssec-validation yes;
+	dnssec-validation no;
 	check-names master ignore;
 	check-names slave ignore;
 	notify yes;
 };
 
-trust-anchors { };
 
 zone "." {
 	type hint;
diff --git a/bin/tests/system/cipher-suites/ns1/named.conf.in b/bin/tests/system/cipher-suites/ns1/named.conf.in
index 8de44d1cb4..312f48908b 100644
--- a/bin/tests/system/cipher-suites/ns1/named.conf.in
+++ b/bin/tests/system/cipher-suites/ns1/named.conf.in
@@ -63,13 +63,12 @@ options {
 	notify explicit;
 	also-notify { 10.53.0.2 port @PORT@; };
 	statistics-file "named.stats";
-	dnssec-validation yes;
+	dnssec-validation no;
 	tcp-initial-timeout 1200;
 	transfers-in 100;
 	transfers-out 100;
 };
 
-trust-anchors { };
 
 zone "." {
 	type primary;
diff --git a/bin/tests/system/cipher-suites/ns2/named.conf.in b/bin/tests/system/cipher-suites/ns2/named.conf.in
index c81429c902..61a3965751 100644
--- a/bin/tests/system/cipher-suites/ns2/named.conf.in
+++ b/bin/tests/system/cipher-suites/ns2/named.conf.in
@@ -36,10 +36,9 @@ options {
 	notify no;
 	ixfr-from-differences yes;
 	check-integrity no;
-	dnssec-validation yes;
+	dnssec-validation no;
 };
 
-trust-anchors { };
 
 zone "." {
 	type hint;
diff --git a/bin/tests/system/cipher-suites/ns3/named.conf.in b/bin/tests/system/cipher-suites/ns3/named.conf.in
index ab642f92ce..4e368a7dd5 100644
--- a/bin/tests/system/cipher-suites/ns3/named.conf.in
+++ b/bin/tests/system/cipher-suites/ns3/named.conf.in
@@ -36,10 +36,9 @@ options {
 	notify no;
 	ixfr-from-differences yes;
 	check-integrity no;
-	dnssec-validation yes;
+	dnssec-validation no;
 };
 
-trust-anchors { };
 
 zone "." {
 	type hint;
diff --git a/bin/tests/system/cipher-suites/ns4/named.conf.in b/bin/tests/system/cipher-suites/ns4/named.conf.in
index a690cf5c78..e60be88443 100644
--- a/bin/tests/system/cipher-suites/ns4/named.conf.in
+++ b/bin/tests/system/cipher-suites/ns4/named.conf.in
@@ -36,10 +36,9 @@ options {
 	notify no;
 	ixfr-from-differences yes;
 	check-integrity no;
-	dnssec-validation yes;
+	dnssec-validation no;
 };
 
-trust-anchors { };
 
 zone "." {
 	type hint;
diff --git a/bin/tests/system/cipher-suites/ns5/named.conf.in b/bin/tests/system/cipher-suites/ns5/named.conf.in
index c36b374a19..fcbc2afec1 100644
--- a/bin/tests/system/cipher-suites/ns5/named.conf.in
+++ b/bin/tests/system/cipher-suites/ns5/named.conf.in
@@ -36,10 +36,9 @@ options {
 	notify no;
 	ixfr-from-differences yes;
 	check-integrity no;
-	dnssec-validation yes;
+	dnssec-validation no;
 };
 
-trust-anchors { };
 
 zone "." {
 	type hint;
diff --git a/bin/tests/system/cookie/ns1/named.conf.j2 b/bin/tests/system/cookie/ns1/named.conf.j2
index 0bd93c93de..6d42d94f58 100644
--- a/bin/tests/system/cookie/ns1/named.conf.j2
+++ b/bin/tests/system/cookie/ns1/named.conf.j2
@@ -38,7 +38,7 @@ options {
 	listen-on { 10.53.0.1; };
 	listen-on-v6 { none; };
 	recursion yes;
-	dnssec-validation yes;
+	dnssec-validation no;
 	deny-answer-addresses { 192.0.2.0/24; 2001:db8:beef::/48; }
 		 except-from { "example.org"; };
 	deny-answer-aliases { "example.org"; }
@@ -49,7 +49,6 @@ options {
 	nocookie-udp-size 512;
 };
 
-trust-anchors { };
 
 zone "." {
 	type hint;
diff --git a/bin/tests/system/cookie/ns3/named.conf.j2 b/bin/tests/system/cookie/ns3/named.conf.j2
index cbebd07433..7f8c32536d 100644
--- a/bin/tests/system/cookie/ns3/named.conf.j2
+++ b/bin/tests/system/cookie/ns3/named.conf.j2
@@ -29,7 +29,7 @@ options {
 	listen-on { 10.53.0.3; };
 	listen-on-v6 { none; };
 	recursion yes;
-	dnssec-validation yes;
+	dnssec-validation no;
 	deny-answer-addresses { 192.0.2.0/24; 2001:db8:beef::/48; }
 		 except-from { "example.org"; };
 	deny-answer-aliases { "example.org"; }
@@ -41,7 +41,6 @@ options {
 	require-server-cookie yes;
 };
 
-trust-anchors { };
 
 zone "." {
 	type hint;
diff --git a/bin/tests/system/cookie/ns4/named.conf.j2 b/bin/tests/system/cookie/ns4/named.conf.j2
index 592be13ed0..06da09e6e2 100644
--- a/bin/tests/system/cookie/ns4/named.conf.j2
+++ b/bin/tests/system/cookie/ns4/named.conf.j2
@@ -29,13 +29,12 @@ options {
 	listen-on { 10.53.0.4; };
 	listen-on-v6 { none; };
 	recursion yes;
-	dnssec-validation yes;
+	dnssec-validation no;
 	cookie-algorithm siphash24;
 	cookie-secret "569d36a6cc27d6bf55502183302ba352";
 	require-server-cookie yes;
 };
 
-trust-anchors { };
 
 zone "." {
 	type hint;
diff --git a/bin/tests/system/cookie/ns5/named.conf.j2 b/bin/tests/system/cookie/ns5/named.conf.j2
index 2f51e1be94..535e8ef62f 100644
--- a/bin/tests/system/cookie/ns5/named.conf.j2
+++ b/bin/tests/system/cookie/ns5/named.conf.j2
@@ -29,14 +29,13 @@ options {
 	listen-on { 10.53.0.5; };
 	listen-on-v6 { none; };
 	recursion yes;
-	dnssec-validation yes;
+	dnssec-validation no;
 	cookie-algorithm siphash24;
 	cookie-secret "569d36a6cc27d6bf55502183302ba352";
 	cookie-secret "6b300e27a0db46d4b046e4189790fa7d";
 	require-server-cookie yes;
 };
 
-trust-anchors { };
 
 zone "." {
 	type hint;
diff --git a/bin/tests/system/cookie/ns6/named.conf.j2 b/bin/tests/system/cookie/ns6/named.conf.j2
index 56c5e04857..ca4abec7b8 100644
--- a/bin/tests/system/cookie/ns6/named.conf.j2
+++ b/bin/tests/system/cookie/ns6/named.conf.j2
@@ -29,13 +29,12 @@ options {
 	listen-on { 10.53.0.6; };
 	listen-on-v6 { none; };
 	recursion yes;
-	dnssec-validation yes;
+	dnssec-validation no;
 	cookie-algorithm siphash24;
 	cookie-secret "6b300e27a0db46d4b046e4189790fa7d";
 	require-server-cookie yes;
 };
 
-trust-anchors { };
 
 zone "." {
 	type hint;
diff --git a/bin/tests/system/cookie/ns8/named.conf.j2 b/bin/tests/system/cookie/ns8/named.conf.j2
index 36f052b8e4..540bc07af6 100644
--- a/bin/tests/system/cookie/ns8/named.conf.j2
+++ b/bin/tests/system/cookie/ns8/named.conf.j2
@@ -28,12 +28,11 @@ options {
 	pid-file "named.pid";
 	listen-on { 10.53.0.8; };
 	listen-on-v6 { none; };
-	dnssec-validation yes;
+	dnssec-validation no;
 	rate-limit {};
 	require-server-cookie yes;
 };
 
-trust-anchors { };
 
 server 10.53.0.7 { require-cookie yes; };
 
diff --git a/bin/tests/system/database/ns1/named.conf.j2 b/bin/tests/system/database/ns1/named.conf.j2
index 059a15563d..9a84d79551 100644
--- a/bin/tests/system/database/ns1/named.conf.j2
+++ b/bin/tests/system/database/ns1/named.conf.j2
@@ -32,10 +32,9 @@ options {
 	listen-on-v6 { none; };
 	recursion no;
 	notify yes;
-	dnssec-validation yes;
+	dnssec-validation no;
 };
 
-trust-anchors { };
 
 zone "database" {
 	type primary;
diff --git a/bin/tests/system/dns64/ns1/named.conf1.in b/bin/tests/system/dns64/ns1/named.conf1.in
index bc6c2d2366..8a9aee2058 100644
--- a/bin/tests/system/dns64/ns1/named.conf1.in
+++ b/bin/tests/system/dns64/ns1/named.conf1.in
@@ -31,7 +31,7 @@ options {
 	listen-on-v6 { none; };
 	allow-recursion { 10.53.0.1; };
 	notify yes;
-	dnssec-validation yes;
+	dnssec-validation no;
 
 	dns64 2001:bbbb::/96 {
 		clients { any; };
@@ -42,8 +42,6 @@ options {
 	};
 };
 
-trust-anchors { };
-
 zone "." {
 	type primary;
 	file "root.db";
diff --git a/bin/tests/system/dns64/ns1/named.conf2.in b/bin/tests/system/dns64/ns1/named.conf2.in
index d7a6d1f80a..422f2840a8 100644
--- a/bin/tests/system/dns64/ns1/named.conf2.in
+++ b/bin/tests/system/dns64/ns1/named.conf2.in
@@ -31,7 +31,7 @@ options {
 	listen-on-v6 { none; };
 	allow-recursion { 10.53.0.1; };
 	notify yes;
-	dnssec-validation yes;
+	dnssec-validation no;
 
 	dns64 2001:bbbb::/96 {
 		clients { any; };
@@ -45,8 +45,6 @@ options {
 	};
 };
 
-trust-anchors { };
-
 zone "." {
 	type primary;
 	file "root.db";
diff --git a/bin/tests/system/dns64/ns1/named.conf3.in b/bin/tests/system/dns64/ns1/named.conf3.in
index 393e623b36..94a7f3f564 100644
--- a/bin/tests/system/dns64/ns1/named.conf3.in
+++ b/bin/tests/system/dns64/ns1/named.conf3.in
@@ -31,11 +31,9 @@ options {
 	listen-on-v6 { none; };
 	allow-recursion { 10.53.0.1; };
 	notify yes;
-	dnssec-validation yes;
+	dnssec-validation no;
 };
 
-trust-anchors { };
-
 zone "." {
 	type primary;
 	file "root.db";
diff --git a/bin/tests/system/dns64/ns2/named.conf.in b/bin/tests/system/dns64/ns2/named.conf.in
index 49299aaf99..203c18b82c 100644
--- a/bin/tests/system/dns64/ns2/named.conf.in
+++ b/bin/tests/system/dns64/ns2/named.conf.in
@@ -25,7 +25,7 @@ options {
 	listen-on-v6 { none; };
 	recursion yes;
 	notify yes;
-	dnssec-validation yes;
+	dnssec-validation no;
 
 	dns64 2001:aaaa::/96 {
 		clients { 10.53.0.2; };
@@ -60,7 +60,6 @@ options {
 	response-policy { zone "rpz"; };
 };
 
-trust-anchors { };
 
 zone "." {
 	type hint;
diff --git a/bin/tests/system/dns64/ns3/named.conf.in b/bin/tests/system/dns64/ns3/named.conf.in
index a86686bdb0..1de08a56d5 100644
--- a/bin/tests/system/dns64/ns3/named.conf.in
+++ b/bin/tests/system/dns64/ns3/named.conf.in
@@ -29,7 +29,7 @@ options {
 	listen-on { 10.53.0.3; };
 	listen-on-v6 { fd92:7065:b8e:ffff::3; };
 	notify yes;
-	dnssec-validation yes;
+	dnssec-validation no;
 	allow-recursion { any; };
 	resolver-use-dns64 yes;
 
@@ -40,7 +40,6 @@ options {
 	};
 };
 
-trust-anchors { };
 
 zone "." {
 	type hint;
diff --git a/bin/tests/system/dns64/ns4/named.conf.in b/bin/tests/system/dns64/ns4/named.conf.in
index 485cdc82f9..2cb2336863 100644
--- a/bin/tests/system/dns64/ns4/named.conf.in
+++ b/bin/tests/system/dns64/ns4/named.conf.in
@@ -26,11 +26,10 @@ options {
 	listen-on port @PORT@ { 10.53.0.4; };	// for start.pl
 	listen-on-v6 { fd92:7065:b8e:fffe::10.53.0.4; };
 	notify yes;
-	dnssec-validation yes;
+	dnssec-validation no;
 	recursion no;
 };
 
-trust-anchors { };
 
 zone "." {
 	type master;
diff --git a/bin/tests/system/dnstap/ns1/named.conf.j2 b/bin/tests/system/dnstap/ns1/named.conf.j2
index daaf88731a..fa96be906f 100644
--- a/bin/tests/system/dnstap/ns1/named.conf.j2
+++ b/bin/tests/system/dnstap/ns1/named.conf.j2
@@ -28,11 +28,10 @@ options {
 	dnstap { all; };
 	send-cookie no;
 	require-server-cookie no;
-	dnssec-validation yes;
+	dnssec-validation no;
 	qname-minimization disabled;
 };
 
-trust-anchors { };
 
 key rndc_key {
 	secret "1234abcd8765";
diff --git a/bin/tests/system/dnstap/ns2/named.conf.j2 b/bin/tests/system/dnstap/ns2/named.conf.j2
index 12ae86322d..cc3e33a0cc 100644
--- a/bin/tests/system/dnstap/ns2/named.conf.j2
+++ b/bin/tests/system/dnstap/ns2/named.conf.j2
@@ -28,11 +28,10 @@ options {
 	dnstap { all; };
 	send-cookie no;
 	require-server-cookie no;
-	dnssec-validation yes;
+	dnssec-validation no;
 	qname-minimization disabled;
 };
 
-trust-anchors { };
 
 key rndc_key {
 	secret "1234abcd8765";
diff --git a/bin/tests/system/dnstap/ns3/named.conf.j2 b/bin/tests/system/dnstap/ns3/named.conf.j2
index d443c3818a..23b6614e03 100644
--- a/bin/tests/system/dnstap/ns3/named.conf.j2
+++ b/bin/tests/system/dnstap/ns3/named.conf.j2
@@ -29,11 +29,10 @@ options {
 	send-cookie no;
 	require-server-cookie no;
 	minimal-responses no;
-	dnssec-validation yes;
+	dnssec-validation no;
 	qname-minimization disabled;
 };
 
-trust-anchors { };
 
 server 10.53.0.1 { tcp-only yes; };
 
diff --git a/bin/tests/system/dnstap/ns4/named.conf.j2 b/bin/tests/system/dnstap/ns4/named.conf.j2
index 18c4da1100..6607dc4928 100644
--- a/bin/tests/system/dnstap/ns4/named.conf.j2
+++ b/bin/tests/system/dnstap/ns4/named.conf.j2
@@ -28,11 +28,10 @@ options {
 	dnstap { all; };
 	send-cookie no;
 	require-server-cookie no;
-	dnssec-validation yes;
+	dnssec-validation no;
 	qname-minimization disabled;
 };
 
-trust-anchors { };
 
 server 10.53.0.1 { tcp-only yes; };
 
diff --git a/bin/tests/system/doth/ns1/named.conf.in b/bin/tests/system/doth/ns1/named.conf.in
index df9a25daa7..2d697ad130 100644
--- a/bin/tests/system/doth/ns1/named.conf.in
+++ b/bin/tests/system/doth/ns1/named.conf.in
@@ -94,14 +94,13 @@ options {
 	notify explicit;
 	also-notify { 10.53.0.2 port @PORT@; };
 	statistics-file "named.stats";
-	dnssec-validation yes;
+	dnssec-validation no;
 	tcp-initial-timeout 1200;
 	transfers-in 100;
 	transfers-out 100;
 	max-records-per-type 0;
 };
 
-trust-anchors { };
 
 zone "." {
 	type primary;
diff --git a/bin/tests/system/doth/ns2/named.conf.in b/bin/tests/system/doth/ns2/named.conf.in
index a7b09611d1..57bc6c9f82 100644
--- a/bin/tests/system/doth/ns2/named.conf.in
+++ b/bin/tests/system/doth/ns2/named.conf.in
@@ -51,13 +51,12 @@ options {
 	notify no;
 	ixfr-from-differences yes;
 	check-integrity no;
-	dnssec-validation yes;
+	dnssec-validation no;
 	max-records-per-type 0;
 	transfers-in 100;
 	transfers-out 100;
 };
 
-trust-anchors { };
 
 zone "." {
 	type hint;
diff --git a/bin/tests/system/doth/ns3/named.conf.in b/bin/tests/system/doth/ns3/named.conf.in
index daf3164643..0dfa27429e 100644
--- a/bin/tests/system/doth/ns3/named.conf.in
+++ b/bin/tests/system/doth/ns3/named.conf.in
@@ -43,11 +43,10 @@ options {
 	notify no;
 	ixfr-from-differences yes;
 	check-integrity no;
-	dnssec-validation yes;
+	dnssec-validation no;
 	max-records-per-type 0;
 };
 
-trust-anchors { };
 
 zone "." {
 	type hint;
diff --git a/bin/tests/system/doth/ns4/named.conf.in b/bin/tests/system/doth/ns4/named.conf.in
index d637a9c9ed..feff457aae 100644
--- a/bin/tests/system/doth/ns4/named.conf.in
+++ b/bin/tests/system/doth/ns4/named.conf.in
@@ -51,11 +51,10 @@ options {
 	notify no;
 	ixfr-from-differences yes;
 	check-integrity no;
-	dnssec-validation yes;
+	dnssec-validation no;
 	max-records-per-type 0;
 };
 
-trust-anchors { };
 
 zone "." {
 	type hint;
diff --git a/bin/tests/system/doth/ns5/named.conf.in b/bin/tests/system/doth/ns5/named.conf.in
index 7aa3757cdb..7390944a43 100644
--- a/bin/tests/system/doth/ns5/named.conf.in
+++ b/bin/tests/system/doth/ns5/named.conf.in
@@ -39,11 +39,10 @@ options {
 	notify no;
 	ixfr-from-differences yes;
 	check-integrity no;
-	dnssec-validation yes;
+	dnssec-validation no;
 	max-records-per-type 0;
 };
 
-trust-anchors { };
 
 zone "." {
 	type hint;
diff --git a/bin/tests/system/fetchlimit/ns3/named1.conf.in b/bin/tests/system/fetchlimit/ns3/named1.conf.in
index da1661d920..335a4ecfd9 100644
--- a/bin/tests/system/fetchlimit/ns3/named1.conf.in
+++ b/bin/tests/system/fetchlimit/ns3/named1.conf.in
@@ -23,12 +23,11 @@ options {
 	listen-on { 10.53.0.3; };
 	listen-on-v6 { none; };
 	recursion yes;
-	dnssec-validation yes;
+	dnssec-validation no;
 	notify yes;
 	fetches-per-server 400;
 };
 
-trust-anchors { };
 
 server 10.53.0.4 {
 	edns no;
diff --git a/bin/tests/system/fetchlimit/ns3/named2.conf.in b/bin/tests/system/fetchlimit/ns3/named2.conf.in
index d354dfd39f..573d5fbc60 100644
--- a/bin/tests/system/fetchlimit/ns3/named2.conf.in
+++ b/bin/tests/system/fetchlimit/ns3/named2.conf.in
@@ -21,12 +21,11 @@ options {
 	listen-on { 10.53.0.3; };
 	listen-on-v6 { none; };
 	recursion yes;
-	dnssec-validation yes;
+	dnssec-validation no;
 	notify yes;
 	fetches-per-zone 40;
 };
 
-trust-anchors { };
 
 server 10.53.0.4 {
 	edns no;
diff --git a/bin/tests/system/fetchlimit/ns3/named3.conf.in b/bin/tests/system/fetchlimit/ns3/named3.conf.in
index db32409ed3..63e6e5fa78 100644
--- a/bin/tests/system/fetchlimit/ns3/named3.conf.in
+++ b/bin/tests/system/fetchlimit/ns3/named3.conf.in
@@ -21,12 +21,11 @@ options {
 	listen-on { 10.53.0.3; };
 	listen-on-v6 { none; };
 	recursion yes;
-	dnssec-validation yes;
+	dnssec-validation no;
 	notify yes;
 	recursive-clients 400;
 };
 
-trust-anchors { };
 
 server 10.53.0.4 {
 	edns no;
diff --git a/bin/tests/system/fetchlimit/ns5/named1.conf.in b/bin/tests/system/fetchlimit/ns5/named1.conf.in
index f26b8a1941..18e8bb55fa 100644
--- a/bin/tests/system/fetchlimit/ns5/named1.conf.in
+++ b/bin/tests/system/fetchlimit/ns5/named1.conf.in
@@ -21,13 +21,12 @@ options {
 	listen-on { 10.53.0.5; };
 	listen-on-v6 { none; };
 	recursion yes;
-	dnssec-validation yes;
+	dnssec-validation no;
 	notify yes;
 	clients-per-query 5;
 	max-clients-per-query 10;
 };
 
-trust-anchors { };
 
 server 10.53.0.4 {
 	edns no;
diff --git a/bin/tests/system/fetchlimit/ns5/named2.conf.in b/bin/tests/system/fetchlimit/ns5/named2.conf.in
index 32b281d79a..8b64bde59e 100644
--- a/bin/tests/system/fetchlimit/ns5/named2.conf.in
+++ b/bin/tests/system/fetchlimit/ns5/named2.conf.in
@@ -21,7 +21,7 @@ options {
 	listen-on { 10.53.0.5; };
 	listen-on-v6 { none; };
 	recursion yes;
-	dnssec-validation yes;
+	dnssec-validation no;
 	notify yes;
 	stale-answer-enable yes;
 	stale-cache-enable yes;
@@ -30,7 +30,6 @@ options {
 	max-clients-per-query 10;
 };
 
-trust-anchors { };
 
 server 10.53.0.4 {
 	edns no;
diff --git a/bin/tests/system/fetchlimit/ns5/named3.conf.in b/bin/tests/system/fetchlimit/ns5/named3.conf.in
index 7fb1bafd80..2b68d1baef 100644
--- a/bin/tests/system/fetchlimit/ns5/named3.conf.in
+++ b/bin/tests/system/fetchlimit/ns5/named3.conf.in
@@ -21,7 +21,7 @@ options {
 	listen-on { 10.53.0.5; };
 	listen-on-v6 { none; };
 	recursion yes;
-	dnssec-validation yes;
+	dnssec-validation no;
 	notify yes;
 	stale-answer-enable yes;
 	stale-cache-enable yes;
@@ -31,7 +31,6 @@ options {
 	max-clients-per-query 5;
 };
 
-trust-anchors { };
 
 server 10.53.0.4 {
 	edns no;
diff --git a/bin/tests/system/filter-aaaa/ns1/named1.conf.in b/bin/tests/system/filter-aaaa/ns1/named1.conf.in
index 2098420352..3a7338c580 100644
--- a/bin/tests/system/filter-aaaa/ns1/named1.conf.in
+++ b/bin/tests/system/filter-aaaa/ns1/named1.conf.in
@@ -20,12 +20,11 @@ options {
 	listen-on { 10.53.0.1; };
 	listen-on-v6 { fd92:7065:b8e:ffff::1; };
 	recursion no;
-	dnssec-validation yes;
+	dnssec-validation no;
 	notify yes;
 	minimal-responses no;
 };
 
-trust-anchors { };
 
 acl filterees { 10.53.0.1; };
 
diff --git a/bin/tests/system/filter-aaaa/ns1/named2.conf.in b/bin/tests/system/filter-aaaa/ns1/named2.conf.in
index 87910becd5..6b421159ca 100644
--- a/bin/tests/system/filter-aaaa/ns1/named2.conf.in
+++ b/bin/tests/system/filter-aaaa/ns1/named2.conf.in
@@ -20,12 +20,11 @@ options {
 	listen-on { 10.53.0.1; };
 	listen-on-v6 { fd92:7065:b8e:ffff::1; };
 	recursion no;
-	dnssec-validation yes;
+	dnssec-validation no;
 	notify yes;
 	minimal-responses no;
 };
 
-trust-anchors { };
 
 plugin query "@TOP_BUILDDIR@/filter-aaaa.so" {
 	filter-aaaa-on-v6 yes;
diff --git a/bin/tests/system/forward/ns3/named1.conf.in b/bin/tests/system/forward/ns3/named1.conf.in
index 91de8f8540..e9830be4d7 100644
--- a/bin/tests/system/forward/ns3/named1.conf.in
+++ b/bin/tests/system/forward/ns3/named1.conf.in
@@ -24,10 +24,9 @@ options {
 	listen-on-v6 { fd92:7065:b8e:ffff::3; };
 	forwarders { fd92:7065:b8e:ffff::2; };
 	forward first;
-	dnssec-validation yes;
+	dnssec-validation no;
 };
 
-trust-anchors { };
 
 key rndc_key {
 	secret "1234abcd8765";
diff --git a/bin/tests/system/forward/ns4/named.conf.in b/bin/tests/system/forward/ns4/named.conf.in
index 5777c0de51..cd7c5000d9 100644
--- a/bin/tests/system/forward/ns4/named.conf.in
+++ b/bin/tests/system/forward/ns4/named.conf.in
@@ -23,11 +23,10 @@ options {
 	listen-on { 10.53.0.4; };
 	listen-on-v6 { none; };
 	recursion yes;
-	dnssec-validation yes;
+	dnssec-validation no;
 	minimal-responses yes;
 };
 
-trust-anchors { };
 
 statistics-channels { inet 10.53.0.4 port @EXTRAPORT1@ allow { localhost; }; };
 
diff --git a/bin/tests/system/forward/ns5/named.conf.in b/bin/tests/system/forward/ns5/named.conf.in
index 15b89dd0e7..b3e5e32b87 100644
--- a/bin/tests/system/forward/ns5/named.conf.in
+++ b/bin/tests/system/forward/ns5/named.conf.in
@@ -22,10 +22,9 @@ options {
 	forward only;
 	forwarders { 10.53.0.4; };
 	deny-answer-aliases { "rebind"; };
-	dnssec-validation yes;
+	dnssec-validation no;
 };
 
-trust-anchors { };
 
 zone "." {
 	type hint;
diff --git a/bin/tests/system/forward/ns7/named.conf.in b/bin/tests/system/forward/ns7/named.conf.in
index c6e55a89bc..592422f93d 100644
--- a/bin/tests/system/forward/ns7/named.conf.in
+++ b/bin/tests/system/forward/ns7/named.conf.in
@@ -21,10 +21,9 @@ options {
 	listen-on-v6 { none; };
 	forwarders { 10.53.0.4; };
 	forward first;
-	dnssec-validation yes;
+	dnssec-validation no;
 };
 
-trust-anchors { };
 
 zone "." {
 	type hint;
diff --git a/bin/tests/system/forward/ns8/named.conf.in b/bin/tests/system/forward/ns8/named.conf.in
index 13c38594e0..cd106972b8 100644
--- a/bin/tests/system/forward/ns8/named.conf.in
+++ b/bin/tests/system/forward/ns8/named.conf.in
@@ -21,10 +21,9 @@ options {
 	listen-on-v6 { none; };
 	forwarders { 10.53.0.2; };	// returns referrals
 	forward first;
-	dnssec-validation yes;
+	dnssec-validation no;
 };
 
-trust-anchors { };
 
 zone "." {
 	type hint;
diff --git a/bin/tests/system/hooks/ns1/named.conf.j2 b/bin/tests/system/hooks/ns1/named.conf.j2
index 5055a00c53..500ede379d 100644
--- a/bin/tests/system/hooks/ns1/named.conf.j2
+++ b/bin/tests/system/hooks/ns1/named.conf.j2
@@ -19,12 +19,11 @@ options {
 	pid-file "named.pid";
 	listen-on { 10.53.0.1; };
 	recursion no;
-	dnssec-validation yes;
+	dnssec-validation no;
 	notify yes;
 	minimal-responses no;
 };
 
-trust-anchors { };
 
 plugin query "@TOP_BUILDDIR@/testlib-driver-async.so";
 
diff --git a/bin/tests/system/legacy/ns1/named1.conf.in b/bin/tests/system/legacy/ns1/named1.conf.in
index bada7eb630..1441674f40 100644
--- a/bin/tests/system/legacy/ns1/named1.conf.in
+++ b/bin/tests/system/legacy/ns1/named1.conf.in
@@ -20,10 +20,9 @@ options {
 	listen-on { 10.53.0.1; };
 	listen-on-v6 { none; };
 	recursion yes;
-	dnssec-validation yes;
+	dnssec-validation no;
 };
 
-trust-anchors { };
 
 key rndc_key {
 	secret "1234abcd8765";
diff --git a/bin/tests/system/masterfile/ns2/named.conf.j2 b/bin/tests/system/masterfile/ns2/named.conf.j2
index 4e66b4f1c0..aafa398ae0 100644
--- a/bin/tests/system/masterfile/ns2/named.conf.j2
+++ b/bin/tests/system/masterfile/ns2/named.conf.j2
@@ -24,10 +24,9 @@ options {
 	allow-transfer { any; };
 	recursion no;
 	notify yes;
-	dnssec-validation yes;
+	dnssec-validation no;
 };
 
-trust-anchors { };
 
 zone "." {
 	type hint;
diff --git a/bin/tests/system/mkeys/ns1/named1.conf.in b/bin/tests/system/mkeys/ns1/named1.conf.in
index d45e98d768..874fefebfd 100644
--- a/bin/tests/system/mkeys/ns1/named1.conf.in
+++ b/bin/tests/system/mkeys/ns1/named1.conf.in
@@ -28,11 +28,10 @@ options {
 	listen-on-v6 { none; };
 	recursion no;
 	notify no;
-	dnssec-validation yes;
+	dnssec-validation no;
 	allow-query { allowed; };
 };
 
-trust-anchors { };
 
 key rndc_key {
 	secret "1234abcd8765";
diff --git a/bin/tests/system/mkeys/ns1/named2.conf.in b/bin/tests/system/mkeys/ns1/named2.conf.in
index d45e98d768..874fefebfd 100644
--- a/bin/tests/system/mkeys/ns1/named2.conf.in
+++ b/bin/tests/system/mkeys/ns1/named2.conf.in
@@ -28,11 +28,10 @@ options {
 	listen-on-v6 { none; };
 	recursion no;
 	notify no;
-	dnssec-validation yes;
+	dnssec-validation no;
 	allow-query { allowed; };
 };
 
-trust-anchors { };
 
 key rndc_key {
 	secret "1234abcd8765";
diff --git a/bin/tests/system/mkeys/ns1/named3.conf.in b/bin/tests/system/mkeys/ns1/named3.conf.in
index 12b8c71c54..3709b17a97 100644
--- a/bin/tests/system/mkeys/ns1/named3.conf.in
+++ b/bin/tests/system/mkeys/ns1/named3.conf.in
@@ -23,10 +23,9 @@ options {
 	listen-on-v6 { none; };
 	recursion no;
 	notify no;
-	dnssec-validation yes;
+	dnssec-validation no;
 };
 
-trust-anchors { };
 
 key rndc_key {
 	secret "1234abcd8765";
diff --git a/bin/tests/system/nsupdate/ns3/named.conf.in b/bin/tests/system/nsupdate/ns3/named.conf.in
index 180ce700bf..9405b5b685 100644
--- a/bin/tests/system/nsupdate/ns3/named.conf.in
+++ b/bin/tests/system/nsupdate/ns3/named.conf.in
@@ -23,10 +23,9 @@ options {
 	listen-on-v6 { none; };
 	recursion no;
 	notify yes;
-	dnssec-validation yes;
+	dnssec-validation no;
 };
 
-trust-anchors { };
 
 key rndc_key {
 	secret "1234abcd8765";
diff --git a/bin/tests/system/pipelined/ns2/named.conf.j2 b/bin/tests/system/pipelined/ns2/named.conf.j2
index 8cb605c8bd..16f8821e6f 100644
--- a/bin/tests/system/pipelined/ns2/named.conf.j2
+++ b/bin/tests/system/pipelined/ns2/named.conf.j2
@@ -20,11 +20,10 @@ options {
 	listen-on { 10.53.0.2; };
 	listen-on-v6 { none; };
 	recursion yes;
-	dnssec-validation yes;
+	dnssec-validation no;
 	notify yes;
 };
 
-trust-anchors { };
 
 key rndc_key {
 	secret "1234abcd8765";
diff --git a/bin/tests/system/pipelined/ns3/named.conf.j2 b/bin/tests/system/pipelined/ns3/named.conf.j2
index 96a9a92b6c..3a4acb6090 100644
--- a/bin/tests/system/pipelined/ns3/named.conf.j2
+++ b/bin/tests/system/pipelined/ns3/named.conf.j2
@@ -20,11 +20,10 @@ options {
 	listen-on { 10.53.0.3; };
 	listen-on-v6 { none; };
 	recursion yes;
-	dnssec-validation yes;
+	dnssec-validation no;
 	notify yes;
 };
 
-trust-anchors { };
 
 key rndc_key {
 	secret "1234abcd8765";
diff --git a/bin/tests/system/pipelined/ns4/named.conf.j2 b/bin/tests/system/pipelined/ns4/named.conf.j2
index 3a187bf935..666816e2b4 100644
--- a/bin/tests/system/pipelined/ns4/named.conf.j2
+++ b/bin/tests/system/pipelined/ns4/named.conf.j2
@@ -21,11 +21,10 @@ options {
 	listen-on { 10.53.0.4; };
 	listen-on-v6 { none; };
 	recursion yes;
-	dnssec-validation yes;
+	dnssec-validation no;
 	notify yes;
 };
 
-trust-anchors { };
 
 key rndc_key {
 	secret "1234abcd8765";
diff --git a/bin/tests/system/proxy/ns1/named.conf.in b/bin/tests/system/proxy/ns1/named.conf.in
index 4e2c620cd7..08999512aa 100644
--- a/bin/tests/system/proxy/ns1/named.conf.in
+++ b/bin/tests/system/proxy/ns1/named.conf.in
@@ -50,11 +50,10 @@ options {
 	recursion no;
 	notify explicit;
 	statistics-file "named.stats";
-	dnssec-validation yes;
+	dnssec-validation no;
 	tcp-initial-timeout 1200;
 };
 
-trust-anchors { };
 
 zone "example0" {
 	type primary;
diff --git a/bin/tests/system/proxy/ns3/named.conf.in b/bin/tests/system/proxy/ns3/named.conf.in
index db1c3467e6..821c313831 100644
--- a/bin/tests/system/proxy/ns3/named.conf.in
+++ b/bin/tests/system/proxy/ns3/named.conf.in
@@ -45,11 +45,10 @@ options {
 	recursion no;
 	notify explicit;
 	statistics-file "named.stats";
-	dnssec-validation yes;
+	dnssec-validation no;
 	tcp-initial-timeout 1200;
 };
 
-trust-anchors { };
 
 zone "example" {
 	type primary;
diff --git a/bin/tests/system/reclimit/ns3/named1.conf.in b/bin/tests/system/reclimit/ns3/named1.conf.in
index 295eae0864..9f43188ede 100644
--- a/bin/tests/system/reclimit/ns3/named1.conf.in
+++ b/bin/tests/system/reclimit/ns3/named1.conf.in
@@ -25,10 +25,9 @@ options {
 	max-recursion-queries 50;
 	max-recursion-depth 12;
 	recursion yes;
-	dnssec-validation yes;
+	dnssec-validation no;
 };
 
-trust-anchors { };
 
 key rndc_key {
 	secret "1234abcd8765";
diff --git a/bin/tests/system/reclimit/ns3/named2.conf.in b/bin/tests/system/reclimit/ns3/named2.conf.in
index 974b24bcff..00b48e8703 100644
--- a/bin/tests/system/reclimit/ns3/named2.conf.in
+++ b/bin/tests/system/reclimit/ns3/named2.conf.in
@@ -24,10 +24,9 @@ options {
 	qname-minimization disabled;
 	max-recursion-depth 5;
 	recursion yes;
-	dnssec-validation yes;
+	dnssec-validation no;
 };
 
-trust-anchors { };
 
 key rndc_key {
 	secret "1234abcd8765";
diff --git a/bin/tests/system/reclimit/ns3/named3.conf.in b/bin/tests/system/reclimit/ns3/named3.conf.in
index 38a77ae35c..1cfea50711 100644
--- a/bin/tests/system/reclimit/ns3/named3.conf.in
+++ b/bin/tests/system/reclimit/ns3/named3.conf.in
@@ -25,10 +25,9 @@ options {
 	max-recursion-depth 100;
 	max-recursion-queries 50;
 	recursion yes;
-	dnssec-validation yes;
+	dnssec-validation no;
 };
 
-trust-anchors { };
 
 key rndc_key {
 	secret "1234abcd8765";
diff --git a/bin/tests/system/reclimit/ns3/named4.conf.in b/bin/tests/system/reclimit/ns3/named4.conf.in
index 5a0660766f..c1acbe46a2 100644
--- a/bin/tests/system/reclimit/ns3/named4.conf.in
+++ b/bin/tests/system/reclimit/ns3/named4.conf.in
@@ -25,10 +25,9 @@ options {
 	max-recursion-depth 100;
 	max-recursion-queries 40;
 	recursion yes;
-	dnssec-validation yes;
+	dnssec-validation no;
 };
 
-trust-anchors { };
 
 key rndc_key {
 	secret "1234abcd8765";
diff --git a/bin/tests/system/reclimit/ns3/named5.conf.in b/bin/tests/system/reclimit/ns3/named5.conf.in
index 7cf0633a00..10d955a08b 100644
--- a/bin/tests/system/reclimit/ns3/named5.conf.in
+++ b/bin/tests/system/reclimit/ns3/named5.conf.in
@@ -24,12 +24,11 @@ options {
 	qname-minimization disabled;
 	max-recursion-depth 12;
 	recursion yes;
-	dnssec-validation yes;
+	dnssec-validation no;
 	max-records-per-type 0;
 	max-types-per-name 10;
 };
 
-trust-anchors { };
 
 key rndc_key {
 	secret "1234abcd8765";
diff --git a/bin/tests/system/reclimit/ns3/named6.conf.in b/bin/tests/system/reclimit/ns3/named6.conf.in
index e1607e275d..e86140eaf3 100644
--- a/bin/tests/system/reclimit/ns3/named6.conf.in
+++ b/bin/tests/system/reclimit/ns3/named6.conf.in
@@ -24,12 +24,11 @@ options {
 	qname-minimization disabled;
 	max-recursion-depth 12;
 	recursion yes;
-	dnssec-validation yes;
+	dnssec-validation no;
 	max-records-per-type 0;
 	max-types-per-name 0;
 };
 
-trust-anchors { };
 
 key rndc_key {
 	secret "1234abcd8765";
diff --git a/bin/tests/system/redirect/ns1/named.conf.in b/bin/tests/system/redirect/ns1/named.conf.in
index 3b4ccad028..9a046cc3ba 100644
--- a/bin/tests/system/redirect/ns1/named.conf.in
+++ b/bin/tests/system/redirect/ns1/named.conf.in
@@ -25,10 +25,9 @@ options {
 	listen-on-v6 { none; };
 	allow-recursion { 10.53.0.1; };
 	notify yes;
-	dnssec-validation yes;
+	dnssec-validation no;
 };
 
-trust-anchors { };
 
 zone "." {
 	type primary;
diff --git a/bin/tests/system/redirect/ns2/named.conf.in b/bin/tests/system/redirect/ns2/named.conf.in
index e07d75bdfe..e744476535 100644
--- a/bin/tests/system/redirect/ns2/named.conf.in
+++ b/bin/tests/system/redirect/ns2/named.conf.in
@@ -27,11 +27,10 @@ options {
 	listen-on-v6 { none; };
 	recursion yes;
 	notify yes;
-	dnssec-validation yes;
+	dnssec-validation no;
 
 };
 
-trust-anchors { };
 
 key rndc_key {
 	secret "1234abcd8765";
diff --git a/bin/tests/system/redirect/ns3/named.conf.in b/bin/tests/system/redirect/ns3/named.conf.in
index 51e590f630..3c96fbcce8 100644
--- a/bin/tests/system/redirect/ns3/named.conf.in
+++ b/bin/tests/system/redirect/ns3/named.conf.in
@@ -23,10 +23,9 @@ options {
 	listen-on-v6 { none; };
 	allow-recursion { 10.53.0.3; };
 	notify yes;
-	dnssec-validation yes;
+	dnssec-validation no;
 };
 
-trust-anchors { };
 
 zone "." {
 	type primary;
diff --git a/bin/tests/system/redirect/ns4/named.conf.in b/bin/tests/system/redirect/ns4/named.conf.in
index 8937453ace..c143be4f19 100644
--- a/bin/tests/system/redirect/ns4/named.conf.in
+++ b/bin/tests/system/redirect/ns4/named.conf.in
@@ -27,11 +27,10 @@ options {
 	listen-on-v6 { none; };
 	recursion yes;
 	notify yes;
-	dnssec-validation yes;
+	dnssec-validation no;
 	nxdomain-redirect "redirect";
 };
 
-trust-anchors { };
 
 key rndc_key {
 	secret "1234abcd8765";
diff --git a/bin/tests/system/resolver/ns1/named.conf.in b/bin/tests/system/resolver/ns1/named.conf.in
index cb0cb13d17..2bb2ce1f86 100644
--- a/bin/tests/system/resolver/ns1/named.conf.in
+++ b/bin/tests/system/resolver/ns1/named.conf.in
@@ -20,7 +20,7 @@ options {
 	listen-on { 10.53.0.1; };
 	listen-on-v6 { none; };
 	recursion yes;
-	dnssec-validation yes;
+	dnssec-validation no;
 	deny-answer-addresses { 192.0.2.0/24; 2001:db8:beef::/48; }
 		 except-from { "example.org"; };
 	deny-answer-aliases { "example.org"; }
@@ -34,7 +34,6 @@ options {
 	request-zoneversion yes;
 };
 
-trust-anchors { };
 
 server 10.53.0.3 {
 	tcp-only yes;
diff --git a/bin/tests/system/resolver/ns7/named1.conf.in b/bin/tests/system/resolver/ns7/named1.conf.in
index 170ce62716..b9938520d6 100644
--- a/bin/tests/system/resolver/ns7/named1.conf.in
+++ b/bin/tests/system/resolver/ns7/named1.conf.in
@@ -22,7 +22,7 @@ options {
 	listen-on { 10.53.0.7; };
 	listen-on-v6 { fd92:7065:b8e:ffff::7; };
 	recursion yes;
-	dnssec-validation yes;
+	dnssec-validation no;
 	empty-zones-enable yes;
 	disable-empty-zone 20.172.in-addr.arpa;
 	/*
@@ -34,7 +34,6 @@ options {
 	edns-udp-size 4096;
 };
 
-trust-anchors { };
 
 key rndc_key {
 	secret "1234abcd8765";
diff --git a/bin/tests/system/resolver/ns7/named2.conf.in b/bin/tests/system/resolver/ns7/named2.conf.in
index 170ce62716..b9938520d6 100644
--- a/bin/tests/system/resolver/ns7/named2.conf.in
+++ b/bin/tests/system/resolver/ns7/named2.conf.in
@@ -22,7 +22,7 @@ options {
 	listen-on { 10.53.0.7; };
 	listen-on-v6 { fd92:7065:b8e:ffff::7; };
 	recursion yes;
-	dnssec-validation yes;
+	dnssec-validation no;
 	empty-zones-enable yes;
 	disable-empty-zone 20.172.in-addr.arpa;
 	/*
@@ -34,7 +34,6 @@ options {
 	edns-udp-size 4096;
 };
 
-trust-anchors { };
 
 key rndc_key {
 	secret "1234abcd8765";
diff --git a/bin/tests/system/resolver/ns9/named.conf.in b/bin/tests/system/resolver/ns9/named.conf.in
index bfc979ca6f..c1e79febec 100644
--- a/bin/tests/system/resolver/ns9/named.conf.in
+++ b/bin/tests/system/resolver/ns9/named.conf.in
@@ -20,12 +20,11 @@ options {
 	listen-on-v6 { fd92:7065:b8e:ffff::9; };
 	recursion yes;
 	recursive-clients 0; // regression test for [GL #4987]
-	dnssec-validation yes;
+	dnssec-validation no;
 	dual-stack-servers { fd92:7065:b8e:ffff::7; };
 	qname-minimization off;
 };
 
-trust-anchors { };
 
 key rndc_key {
 	secret "1234abcd8765";
diff --git a/bin/tests/system/rndc/ns4/named.conf.in b/bin/tests/system/rndc/ns4/named.conf.in
index 0ec0cc7bf8..bb1283b362 100644
--- a/bin/tests/system/rndc/ns4/named.conf.in
+++ b/bin/tests/system/rndc/ns4/named.conf.in
@@ -17,10 +17,9 @@ options {
 	listen-on { 10.53.0.4; };
 	listen-on-v6 { none; };
 	recursion yes;
-	dnssec-validation yes;
+	dnssec-validation no;
 };
 
-trust-anchors { };
 
 view normal {
 	match-clients { any; };
diff --git a/bin/tests/system/rpz/ns3/named.conf.in b/bin/tests/system/rpz/ns3/named.conf.in
index 1ee20ac0f7..672ba05f21 100644
--- a/bin/tests/system/rpz/ns3/named.conf.in
+++ b/bin/tests/system/rpz/ns3/named.conf.in
@@ -29,7 +29,7 @@ options {
 	notify yes;
 	minimal-responses no;
 	recursion yes;
-	dnssec-validation yes;
+	dnssec-validation no;
 	min-refresh-time 1;
 	min-retry-time 1;
 
@@ -64,7 +64,6 @@ options {
 	notify-delay 0;
 };
 
-trust-anchors { };
 
 logging { category rpz { default_debug; }; };
 
diff --git a/bin/tests/system/rpz/ns8/named.conf.in b/bin/tests/system/rpz/ns8/named.conf.in
index 83c13efa66..ef6bc3f795 100644
--- a/bin/tests/system/rpz/ns8/named.conf.in
+++ b/bin/tests/system/rpz/ns8/named.conf.in
@@ -29,7 +29,7 @@ options {
 	notify yes;
 	minimal-responses no;
 	recursion yes;
-	dnssec-validation yes;
+	dnssec-validation no;
 
 	response-policy {
 	    zone "manual-update-rpz";
@@ -46,7 +46,6 @@ options {
 	notify-delay 0;
 };
 
-trust-anchors { };
 
 logging { category rpz { default_debug; }; };
 
diff --git a/bin/tests/system/rpz/ns9/named.conf.in b/bin/tests/system/rpz/ns9/named.conf.in
index ca9a843a97..b26129d1db 100644
--- a/bin/tests/system/rpz/ns9/named.conf.in
+++ b/bin/tests/system/rpz/ns9/named.conf.in
@@ -29,7 +29,7 @@ options {
 	notify yes;
 	minimal-responses no;
 	recursion yes;
-	dnssec-validation yes;
+	dnssec-validation no;
 	dns64-server "example.localdomain.";
 	dns64 64:ff9b::/96 { };
 	response-policy {
@@ -40,7 +40,6 @@ options {
 	notify-delay 0;
 };
 
-trust-anchors { };
 
 logging { category rpz { default_debug; }; };
 
diff --git a/bin/tests/system/rpzrecurse/ns2/named.clientip.conf b/bin/tests/system/rpzrecurse/ns2/named.clientip.conf
index a9ec4ca0a5..884d6d9105 100644
--- a/bin/tests/system/rpzrecurse/ns2/named.clientip.conf
+++ b/bin/tests/system/rpzrecurse/ns2/named.clientip.conf
@@ -33,5 +33,4 @@ view "recursive" {
     zone "clientip2" { type primary; file "db.clientip2"; };
 
     recursion yes;
-    dnssec-validation yes;
 };
diff --git a/bin/tests/system/rpzrecurse/ns2/named.clientip2.conf b/bin/tests/system/rpzrecurse/ns2/named.clientip2.conf
index 39b67d8366..63fb6cfbec 100644
--- a/bin/tests/system/rpzrecurse/ns2/named.clientip2.conf
+++ b/bin/tests/system/rpzrecurse/ns2/named.clientip2.conf
@@ -33,5 +33,4 @@ view "recursive" {
     zone "clientip21" { type primary; file "db.clientip21"; };
 
     recursion yes;
-    dnssec-validation yes;
 };
diff --git a/bin/tests/system/rpzrecurse/ns2/named.conf.header.in b/bin/tests/system/rpzrecurse/ns2/named.conf.header.in
index 49aef0ee3e..f1d24c60d6 100644
--- a/bin/tests/system/rpzrecurse/ns2/named.conf.header.in
+++ b/bin/tests/system/rpzrecurse/ns2/named.conf.header.in
@@ -23,11 +23,10 @@ options {
 	listen-on { 10.53.0.2; };
 	listen-on-v6 { none; };
 	recursion yes;
-	dnssec-validation yes;
+	dnssec-validation no;
 	querylog yes;
 };
 
-trust-anchors { };
 
 key rndc_key {
 	secret "1234abcd8765";
diff --git a/bin/tests/system/rpzrecurse/ns2/named.default.conf b/bin/tests/system/rpzrecurse/ns2/named.default.conf
index 929b88f2e5..aafaf700f3 100644
--- a/bin/tests/system/rpzrecurse/ns2/named.default.conf
+++ b/bin/tests/system/rpzrecurse/ns2/named.default.conf
@@ -21,5 +21,4 @@ view "recursive" {
     };
 
     recursion yes;
-    dnssec-validation yes;
 };
diff --git a/bin/tests/system/rpzrecurse/ns2/named.log.conf b/bin/tests/system/rpzrecurse/ns2/named.log.conf
index a19367e709..74e4175d1f 100644
--- a/bin/tests/system/rpzrecurse/ns2/named.log.conf
+++ b/bin/tests/system/rpzrecurse/ns2/named.log.conf
@@ -35,5 +35,4 @@ view "recursive" {
     zone "log3" { type primary; file "db.log3"; };
 
     recursion yes;
-    dnssec-validation yes;
 };
diff --git a/bin/tests/system/rpzrecurse/ns2/named.max.conf b/bin/tests/system/rpzrecurse/ns2/named.max.conf
index b07783b68d..05cf159559 100644
--- a/bin/tests/system/rpzrecurse/ns2/named.max.conf
+++ b/bin/tests/system/rpzrecurse/ns2/named.max.conf
@@ -157,5 +157,4 @@ view "recursive" {
     zone "max64" { type primary; file "db.max64.local"; };
 
     recursion yes;
-    dnssec-validation yes;
 };
diff --git a/bin/tests/system/rpzrecurse/ns2/named.wildcard1.conf b/bin/tests/system/rpzrecurse/ns2/named.wildcard1.conf
index 23ef4eb7ec..7dd8ce14e7 100644
--- a/bin/tests/system/rpzrecurse/ns2/named.wildcard1.conf
+++ b/bin/tests/system/rpzrecurse/ns2/named.wildcard1.conf
@@ -31,5 +31,4 @@ view "recursive" {
     zone "wildcard1" { type primary; file "db.wildcard1"; };
 
     recursion yes;
-    dnssec-validation yes;
 };
diff --git a/bin/tests/system/rpzrecurse/ns2/named.wildcard2.conf b/bin/tests/system/rpzrecurse/ns2/named.wildcard2.conf
index b570b47929..2eecf94c6f 100644
--- a/bin/tests/system/rpzrecurse/ns2/named.wildcard2.conf
+++ b/bin/tests/system/rpzrecurse/ns2/named.wildcard2.conf
@@ -33,5 +33,4 @@ view "recursive" {
     zone "wildcard2b" { type primary; file "db.wildcard2b"; };
 
     recursion yes;
-    dnssec-validation yes;
 };
diff --git a/bin/tests/system/rpzrecurse/ns2/named.wildcard3.conf b/bin/tests/system/rpzrecurse/ns2/named.wildcard3.conf
index befb7d2f8a..6554177e1a 100644
--- a/bin/tests/system/rpzrecurse/ns2/named.wildcard3.conf
+++ b/bin/tests/system/rpzrecurse/ns2/named.wildcard3.conf
@@ -31,5 +31,4 @@ view "recursive" {
     zone "wildcard3" { type primary; file "db.wildcard3"; };
 
     recursion yes;
-    dnssec-validation yes;
 };
diff --git a/bin/tests/system/rpzrecurse/ns2/named.wildcard4.conf b/bin/tests/system/rpzrecurse/ns2/named.wildcard4.conf
index e18f4962eb..22138563f6 100644
--- a/bin/tests/system/rpzrecurse/ns2/named.wildcard4.conf
+++ b/bin/tests/system/rpzrecurse/ns2/named.wildcard4.conf
@@ -33,5 +33,4 @@ view "recursive" {
 	};
 
 	recursion yes;
-	dnssec-validation yes;
 };
diff --git a/bin/tests/system/rpzrecurse/ns3/named1.conf.in b/bin/tests/system/rpzrecurse/ns3/named1.conf.in
index 4f0ae0ba68..8c3ee26fc5 100644
--- a/bin/tests/system/rpzrecurse/ns3/named1.conf.in
+++ b/bin/tests/system/rpzrecurse/ns3/named1.conf.in
@@ -27,14 +27,13 @@ options {
 	listen-on { 10.53.0.3; };
 	listen-on-v6 { none; };
 	recursion yes;
-	dnssec-validation yes;
+	dnssec-validation no;
 	response-policy { zone "policy"; }
 		qname-wait-recurse yes
 		nsip-enable yes
 		nsdname-enable yes;
 };
 
-trust-anchors { };
 
 zone "policy" { type primary; file "policy.db"; };
 
diff --git a/bin/tests/system/rpzrecurse/ns3/named2.conf.in b/bin/tests/system/rpzrecurse/ns3/named2.conf.in
index d05f370882..7f47623f88 100644
--- a/bin/tests/system/rpzrecurse/ns3/named2.conf.in
+++ b/bin/tests/system/rpzrecurse/ns3/named2.conf.in
@@ -26,14 +26,13 @@ options {
 	listen-on { 10.53.0.3; };
 	listen-on-v6 { none; };
 	recursion yes;
-	dnssec-validation yes;
+	dnssec-validation no;
 	response-policy { zone "policy"; } nsip-wait-recurse no
 		qname-wait-recurse yes
 		nsip-enable yes
 		nsdname-enable yes;
 };
 
-trust-anchors { };
 
 zone "policy" { type primary; file "policy.db"; };
 
diff --git a/bin/tests/system/rpzrecurse/ns3/named3.conf.in b/bin/tests/system/rpzrecurse/ns3/named3.conf.in
index cce8200aa2..3366599ec1 100644
--- a/bin/tests/system/rpzrecurse/ns3/named3.conf.in
+++ b/bin/tests/system/rpzrecurse/ns3/named3.conf.in
@@ -26,12 +26,11 @@ options {
 	listen-on { 10.53.0.3; };
 	listen-on-v6 { none; };
 	recursion yes;
-	dnssec-validation yes;
+	dnssec-validation no;
 	response-policy { zone "policy"; } nsdname-wait-recurse no
 		nsdname-enable yes;
 };
 
-trust-anchors { };
 
 zone "policy" { type primary; file "policy.db"; };
 
diff --git a/bin/tests/system/rrl/ns1/named.conf.j2 b/bin/tests/system/rrl/ns1/named.conf.j2
index a71e1ee215..c819d485c0 100644
--- a/bin/tests/system/rrl/ns1/named.conf.j2
+++ b/bin/tests/system/rrl/ns1/named.conf.j2
@@ -22,9 +22,8 @@ options {
 	listen-on-v6 { none; };
 	notify no;
 	recursion yes;
-	dnssec-validation yes;
+	dnssec-validation no;
 };
 
-trust-anchors { };
 
 zone "." {type primary; file "root.db";};
diff --git a/bin/tests/system/rrl/ns2/named.conf.j2 b/bin/tests/system/rrl/ns2/named.conf.j2
index 298d37050a..5d69e639c4 100644
--- a/bin/tests/system/rrl/ns2/named.conf.j2
+++ b/bin/tests/system/rrl/ns2/named.conf.j2
@@ -23,7 +23,7 @@ options {
 	listen-on-v6 { none; };
 	notify no;
 	recursion yes;
-	dnssec-validation yes;
+	dnssec-validation no;
 
 	rate-limit {
 	    responses-per-second 2;
@@ -36,7 +36,6 @@ options {
 	};
 };
 
-trust-anchors { };
 
 key rndc_key {
 	secret "1234abcd8765";
diff --git a/bin/tests/system/rrl/ns3/named.conf.j2 b/bin/tests/system/rrl/ns3/named.conf.j2
index 4bc0d6fc4a..5be20da2aa 100644
--- a/bin/tests/system/rrl/ns3/named.conf.j2
+++ b/bin/tests/system/rrl/ns3/named.conf.j2
@@ -22,7 +22,7 @@ options {
 	listen-on-v6 { none; };
 	notify no;
 	recursion yes;
-	dnssec-validation yes;
+	dnssec-validation no;
 
 	// check that all of the options are parsed without limiting anything
 	rate-limit {
@@ -43,7 +43,6 @@ options {
 
 };
 
-trust-anchors { };
 
 zone "." { type hint; file "hints"; };
 
diff --git a/bin/tests/system/rrl/ns4/named.conf.j2 b/bin/tests/system/rrl/ns4/named.conf.j2
index bb169f047d..c7f9cccc15 100644
--- a/bin/tests/system/rrl/ns4/named.conf.j2
+++ b/bin/tests/system/rrl/ns4/named.conf.j2
@@ -23,7 +23,7 @@ options {
 	listen-on-v6 { none; };
 	notify no;
 	recursion yes;
-	dnssec-validation yes;
+	dnssec-validation no;
 	max-udp-size 4096;
 
 	rate-limit {
@@ -38,7 +38,6 @@ options {
 	};
 };
 
-trust-anchors { };
 
 key rndc_key {
 	secret "1234abcd8765";
diff --git a/bin/tests/system/rrsetorder/ns3/named.conf.j2 b/bin/tests/system/rrsetorder/ns3/named.conf.j2
index 5d29fae77b..9cfa6ca28d 100644
--- a/bin/tests/system/rrsetorder/ns3/named.conf.j2
+++ b/bin/tests/system/rrsetorder/ns3/named.conf.j2
@@ -20,7 +20,7 @@ options {
 	listen-on { 10.53.0.3; };
 	listen-on-v6 { none; };
 	recursion yes;
-	dnssec-validation yes;
+	dnssec-validation no;
 	notify yes;
 	rrset-order {
 		name "random.example" order random;
@@ -31,7 +31,6 @@ options {
 	};
 };
 
-trust-anchors { };
 
 zone "." {
 	type hint;
diff --git a/bin/tests/system/rrsetorder/ns4/named.conf.j2 b/bin/tests/system/rrsetorder/ns4/named.conf.j2
index 5187aa8fb1..3c906f0d07 100644
--- a/bin/tests/system/rrsetorder/ns4/named.conf.j2
+++ b/bin/tests/system/rrsetorder/ns4/named.conf.j2
@@ -20,7 +20,7 @@ options {
 	listen-on { 10.53.0.4; };
 	listen-on-v6 { none; };
 	recursion yes;
-	dnssec-validation yes;
+	dnssec-validation no;
 	notify yes;
 	rrset-order {
 		class IN type A name "host.example.com" order random;
@@ -28,7 +28,6 @@ options {
 
 };
 
-trust-anchors { };
 
 zone "." {
 	type hint;
diff --git a/bin/tests/system/rrsetorder/ns5/named.conf.j2 b/bin/tests/system/rrsetorder/ns5/named.conf.j2
index f7a2486ad6..e6a56a05b3 100644
--- a/bin/tests/system/rrsetorder/ns5/named.conf.j2
+++ b/bin/tests/system/rrsetorder/ns5/named.conf.j2
@@ -20,11 +20,10 @@ options {
 	listen-on { 10.53.0.5; };
 	listen-on-v6 { none; };
 	recursion yes;
-	dnssec-validation yes;
+	dnssec-validation no;
 	notify yes;
 };
 
-trust-anchors { };
 
 zone "." {
 	type hint;
diff --git a/bin/tests/system/statistics/ns2/named.conf.in b/bin/tests/system/statistics/ns2/named.conf.in
index f23bac8d67..fa34de55d8 100644
--- a/bin/tests/system/statistics/ns2/named.conf.in
+++ b/bin/tests/system/statistics/ns2/named.conf.in
@@ -20,11 +20,10 @@ options {
 	listen-on { 10.53.0.2; };
 	listen-on-v6 { none; };
 	recursion yes;
-	dnssec-validation yes;
+	dnssec-validation no;
 	notify yes;
 };
 
-trust-anchors { };
 
 include "statistics-channels.conf";
 
diff --git a/bin/tests/system/statistics/ns3/named.conf.in b/bin/tests/system/statistics/ns3/named.conf.in
index cacc0ec8e7..2caaf8cfbe 100644
--- a/bin/tests/system/statistics/ns3/named.conf.in
+++ b/bin/tests/system/statistics/ns3/named.conf.in
@@ -21,13 +21,12 @@ options {
 	listen-on { 10.53.0.3; };
 	listen-on-v6 { none; };
 	recursion yes;
-	dnssec-validation yes;
+	dnssec-validation no;
 	notify yes;
 	qname-minimization disabled;
 	zone-statistics yes;
 };
 
-trust-anchors { };
 
 include "statistics-channels.conf";
 
diff --git a/bin/tests/system/stress/ns3/named.conf.in b/bin/tests/system/stress/ns3/named.conf.in
index c11aec2d48..f2bbb0dd17 100644
--- a/bin/tests/system/stress/ns3/named.conf.in
+++ b/bin/tests/system/stress/ns3/named.conf.in
@@ -22,11 +22,10 @@ options {
 	listen-on { 10.53.0.3; };
 	listen-on-v6 { none; };
 	recursion yes;
-	dnssec-validation yes;
+	dnssec-validation no;
 	notify yes;
 };
 
-trust-anchors { };
 
 key rndc_key {
 	secret "1234abcd8765";
diff --git a/bin/tests/system/stress/ns4/named.conf.in b/bin/tests/system/stress/ns4/named.conf.in
index 2dd2e50675..83e548edbd 100644
--- a/bin/tests/system/stress/ns4/named.conf.in
+++ b/bin/tests/system/stress/ns4/named.conf.in
@@ -22,11 +22,10 @@ options {
 	listen-on { 10.53.0.4; };
 	listen-on-v6 { none; };
 	recursion yes;
-	dnssec-validation yes;
+	dnssec-validation no;
 	notify yes;
 };
 
-trust-anchors { };
 
 zone "zone000000.example" {
 	type secondary;
diff --git a/bin/tests/system/transport-acl/ns1/named.conf.in b/bin/tests/system/transport-acl/ns1/named.conf.in
index a1b970fe2a..925fd3f128 100644
--- a/bin/tests/system/transport-acl/ns1/named.conf.in
+++ b/bin/tests/system/transport-acl/ns1/named.conf.in
@@ -64,11 +64,10 @@ options {
 	recursion no;
 	notify explicit;
 	statistics-file "named.stats";
-	dnssec-validation yes;
+	dnssec-validation no;
 	tcp-initial-timeout 1200;
 };
 
-trust-anchors { };
 
 zone "example0" {
 	type primary;
diff --git a/bin/tests/system/transport-change/ns1/named-http-plain-proxy.conf.in b/bin/tests/system/transport-change/ns1/named-http-plain-proxy.conf.in
index 374cd06a17..926d5ea976 100644
--- a/bin/tests/system/transport-change/ns1/named-http-plain-proxy.conf.in
+++ b/bin/tests/system/transport-change/ns1/named-http-plain-proxy.conf.in
@@ -34,13 +34,12 @@ options {
 	recursion no;
 	notify explicit;
 	statistics-file "named.stats";
-	dnssec-validation yes;
+	dnssec-validation no;
 	tcp-initial-timeout 1200;
 	allow-proxy { any; };
 	allow-proxy-on { 10.53.0.1; fd92:7065:b8e:ffff::1; };
 };
 
-trust-anchors { };
 
 zone "example" {
 	type primary;
diff --git a/bin/tests/system/transport-change/ns1/named-http-plain.conf.in b/bin/tests/system/transport-change/ns1/named-http-plain.conf.in
index 5d4b88035a..8108f05f46 100644
--- a/bin/tests/system/transport-change/ns1/named-http-plain.conf.in
+++ b/bin/tests/system/transport-change/ns1/named-http-plain.conf.in
@@ -34,13 +34,12 @@ options {
 	recursion no;
 	notify explicit;
 	statistics-file "named.stats";
-	dnssec-validation yes;
+	dnssec-validation no;
 	tcp-initial-timeout 1200;
 	allow-proxy { any; };
 	allow-proxy-on { 10.53.0.1; fd92:7065:b8e:ffff::1; };
 };
 
-trust-anchors { };
 
 zone "example" {
 	type primary;
diff --git a/bin/tests/system/transport-change/ns1/named-https-proxy-encrypted.conf.in b/bin/tests/system/transport-change/ns1/named-https-proxy-encrypted.conf.in
index 45108da9a0..86887ac299 100644
--- a/bin/tests/system/transport-change/ns1/named-https-proxy-encrypted.conf.in
+++ b/bin/tests/system/transport-change/ns1/named-https-proxy-encrypted.conf.in
@@ -34,13 +34,12 @@ options {
 	recursion no;
 	notify explicit;
 	statistics-file "named.stats";
-	dnssec-validation yes;
+	dnssec-validation no;
 	tcp-initial-timeout 1200;
 	allow-proxy { any; };
 	allow-proxy-on { 10.53.0.1; fd92:7065:b8e:ffff::1; };
 };
 
-trust-anchors { };
 
 zone "example" {
 	type primary;
diff --git a/bin/tests/system/transport-change/ns1/named-https-proxy-plain.conf.in b/bin/tests/system/transport-change/ns1/named-https-proxy-plain.conf.in
index 9001c43f45..5ea2397cc6 100644
--- a/bin/tests/system/transport-change/ns1/named-https-proxy-plain.conf.in
+++ b/bin/tests/system/transport-change/ns1/named-https-proxy-plain.conf.in
@@ -34,13 +34,12 @@ options {
 	recursion no;
 	notify explicit;
 	statistics-file "named.stats";
-	dnssec-validation yes;
+	dnssec-validation no;
 	tcp-initial-timeout 1200;
 	allow-proxy { any; };
 	allow-proxy-on { 10.53.0.1; fd92:7065:b8e:ffff::1; };
 };
 
-trust-anchors { };
 
 zone "example" {
 	type primary;
diff --git a/bin/tests/system/transport-change/ns1/named-https.conf.in b/bin/tests/system/transport-change/ns1/named-https.conf.in
index bce99f35ec..11e34e7817 100644
--- a/bin/tests/system/transport-change/ns1/named-https.conf.in
+++ b/bin/tests/system/transport-change/ns1/named-https.conf.in
@@ -34,13 +34,12 @@ options {
 	recursion no;
 	notify explicit;
 	statistics-file "named.stats";
-	dnssec-validation yes;
+	dnssec-validation no;
 	tcp-initial-timeout 1200;
 	allow-proxy { any; };
 	allow-proxy-on { 10.53.0.1; fd92:7065:b8e:ffff::1; };
 };
 
-trust-anchors { };
 
 zone "example" {
 	type primary;
diff --git a/bin/tests/system/transport-change/ns1/named-proxy.conf.in b/bin/tests/system/transport-change/ns1/named-proxy.conf.in
index ff549268d5..daf6f32d0b 100644
--- a/bin/tests/system/transport-change/ns1/named-proxy.conf.in
+++ b/bin/tests/system/transport-change/ns1/named-proxy.conf.in
@@ -34,13 +34,12 @@ options {
 	recursion no;
 	notify explicit;
 	statistics-file "named.stats";
-	dnssec-validation yes;
+	dnssec-validation no;
 	tcp-initial-timeout 1200;
 	allow-proxy { any; };
 	allow-proxy-on { 10.53.0.1; fd92:7065:b8e:ffff::1; };
 };
 
-trust-anchors { };
 
 zone "example" {
 	type primary;
diff --git a/bin/tests/system/transport-change/ns1/named-tls-proxy-encrypted.conf.in b/bin/tests/system/transport-change/ns1/named-tls-proxy-encrypted.conf.in
index 98c2bf48b9..0e875e7441 100644
--- a/bin/tests/system/transport-change/ns1/named-tls-proxy-encrypted.conf.in
+++ b/bin/tests/system/transport-change/ns1/named-tls-proxy-encrypted.conf.in
@@ -34,13 +34,12 @@ options {
 	recursion no;
 	notify explicit;
 	statistics-file "named.stats";
-	dnssec-validation yes;
+	dnssec-validation no;
 	tcp-initial-timeout 1200;
 	allow-proxy { any; };
 	allow-proxy-on { 10.53.0.1; fd92:7065:b8e:ffff::1; };
 };
 
-trust-anchors { };
 
 zone "example" {
 	type primary;
diff --git a/bin/tests/system/transport-change/ns1/named-tls-proxy-plain.conf.in b/bin/tests/system/transport-change/ns1/named-tls-proxy-plain.conf.in
index 20c829f018..82fb45068a 100644
--- a/bin/tests/system/transport-change/ns1/named-tls-proxy-plain.conf.in
+++ b/bin/tests/system/transport-change/ns1/named-tls-proxy-plain.conf.in
@@ -34,13 +34,12 @@ options {
 	recursion no;
 	notify explicit;
 	statistics-file "named.stats";
-	dnssec-validation yes;
+	dnssec-validation no;
 	tcp-initial-timeout 1200;
 	allow-proxy { any; };
 	allow-proxy-on { 10.53.0.1; fd92:7065:b8e:ffff::1; };
 };
 
-trust-anchors { };
 
 zone "example" {
 	type primary;
diff --git a/bin/tests/system/transport-change/ns1/named-tls.conf.in b/bin/tests/system/transport-change/ns1/named-tls.conf.in
index a436768d6e..a67ffa6fe4 100644
--- a/bin/tests/system/transport-change/ns1/named-tls.conf.in
+++ b/bin/tests/system/transport-change/ns1/named-tls.conf.in
@@ -34,13 +34,12 @@ options {
 	recursion no;
 	notify explicit;
 	statistics-file "named.stats";
-	dnssec-validation yes;
+	dnssec-validation no;
 	tcp-initial-timeout 1200;
 	allow-proxy { any; };
 	allow-proxy-on { 10.53.0.1; fd92:7065:b8e:ffff::1; };
 };
 
-trust-anchors { };
 
 zone "example" {
 	type primary;
diff --git a/bin/tests/system/transport-change/ns1/named.conf.in b/bin/tests/system/transport-change/ns1/named.conf.in
index e594c6ef06..7f334adc0a 100644
--- a/bin/tests/system/transport-change/ns1/named.conf.in
+++ b/bin/tests/system/transport-change/ns1/named.conf.in
@@ -34,13 +34,12 @@ options {
 	recursion no;
 	notify explicit;
 	statistics-file "named.stats";
-	dnssec-validation yes;
+	dnssec-validation no;
 	tcp-initial-timeout 1200;
 	allow-proxy { any; };
 	allow-proxy-on { 10.53.0.1; fd92:7065:b8e:ffff::1; };
 };
 
-trust-anchors { };
 
 zone "example" {
 	type primary;
diff --git a/bin/tests/system/zero/ns3/named.conf.in b/bin/tests/system/zero/ns3/named.conf.in
index 025dcb46cb..55fd7dd9b2 100644
--- a/bin/tests/system/zero/ns3/named.conf.in
+++ b/bin/tests/system/zero/ns3/named.conf.in
@@ -20,11 +20,10 @@ options {
 	listen-on { 10.53.0.3; };
 	listen-on-v6 { none; };
 	recursion yes;
-	dnssec-validation yes;
+	dnssec-validation no;
 	servfail-ttl 0;
 };
 
-trust-anchors { };
 
 zone "." {
 	type hint;
diff --git a/bin/tests/system/zero/ns4/named.conf.in b/bin/tests/system/zero/ns4/named.conf.in
index 037a5e9e47..36339defab 100644
--- a/bin/tests/system/zero/ns4/named.conf.in
+++ b/bin/tests/system/zero/ns4/named.conf.in
@@ -20,10 +20,9 @@ options {
 	listen-on { 10.53.0.4; };
 	listen-on-v6 { none; };
 	recursion no;
-	dnssec-validation yes;
+	dnssec-validation no;
 };
 
-trust-anchors { };
 
 zone "example" {
 	type secondary;
diff --git a/bin/tests/system/zonechecks/ns1/named.conf.in b/bin/tests/system/zonechecks/ns1/named.conf.in
index f563b46d26..6bbe18e698 100644
--- a/bin/tests/system/zonechecks/ns1/named.conf.in
+++ b/bin/tests/system/zonechecks/ns1/named.conf.in
@@ -23,10 +23,9 @@ options {
 	listen-on-v6 { none; };
 	recursion no;
 	notify yes;
-	dnssec-validation yes;
+	dnssec-validation no;
 };
 
-trust-anchors { };
 
 key rndc_key {
 	secret "1234abcd8765";
diff --git a/bin/tests/system/zonechecks/ns2/named.conf.in b/bin/tests/system/zonechecks/ns2/named.conf.in
index 8385b5adc8..9faeb3e62d 100644
--- a/bin/tests/system/zonechecks/ns2/named.conf.in
+++ b/bin/tests/system/zonechecks/ns2/named.conf.in
@@ -23,10 +23,9 @@ options {
 	listen-on-v6 { none; };
 	recursion no;
 	notify yes;
-	dnssec-validation yes;
+	dnssec-validation no;
 };
 
-trust-anchors { };
 
 key rndc_key {
 	secret "1234abcd8765";