diff --git a/bin/dnssec/dnssec-signzone.c b/bin/dnssec/dnssec-signzone.c
index 1a7f15361f..2e768610bf 100644
--- a/bin/dnssec/dnssec-signzone.c
+++ b/bin/dnssec/dnssec-signzone.c
@@ -867,6 +867,8 @@ loadzonekeys(dns_db_t *db, dns_dbversion_t *version) {
 
 	result = dns_dnssec_findzonekeys(db, version, node, origin, mctx,
 					 20, keys, &nkeys);
+	if (result == ISC_R_NOTFOUND)
+		result = ISC_R_SUCCESS;
 	check_result(result, "dns_dnssec_findzonekeys()");
 
 	for (i = 0; i < nkeys; i++) {
diff --git a/bin/tests/signer.c b/bin/tests/signer.c
index 1a7f15361f..2e768610bf 100644
--- a/bin/tests/signer.c
+++ b/bin/tests/signer.c
@@ -867,6 +867,8 @@ loadzonekeys(dns_db_t *db, dns_dbversion_t *version) {
 
 	result = dns_dnssec_findzonekeys(db, version, node, origin, mctx,
 					 20, keys, &nkeys);
+	if (result == ISC_R_NOTFOUND)
+		result = ISC_R_SUCCESS;
 	check_result(result, "dns_dnssec_findzonekeys()");
 
 	for (i = 0; i < nkeys; i++) {