diff --git a/CHANGES b/CHANGES
index 380dfec1bc..a3787403c8 100644
--- a/CHANGES
+++ b/CHANGES
@@ -34,7 +34,8 @@
 			"make install DESTDIR=/xx" works with
 			"configure --with-libtool".  [RT #9941]
 
-1572.	[placeholder]	rt10148
+1572.	[bug]		nsupdate: sign the soa query to find the enclosing
+			zone if the server is specified. [RT #10148]
 
 1571.	[bug]		rbt:hash_node() could fail leaving the hash table
 			in an inconsistant state.  [RT #10208]
diff --git a/bin/nsupdate/nsupdate.c b/bin/nsupdate/nsupdate.c
index bb0fc61292..1bb3bb73cd 100644
--- a/bin/nsupdate/nsupdate.c
+++ b/bin/nsupdate/nsupdate.c
@@ -15,7 +15,7 @@
  * WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
  */
 
-/* $Id: nsupdate.c,v 1.125 2004/03/02 00:46:53 marka Exp $ */
+/* $Id: nsupdate.c,v 1.126 2004/03/03 22:57:33 marka Exp $ */
 
 #include <config.h>
 
@@ -1704,10 +1704,10 @@ sendrequest(isc_sockaddr_t *srcaddr, isc_sockaddr_t *destaddr,
 		fatal("out of memory");
 	reqinfo->msg = msg;
 	reqinfo->addr = destaddr;
-	result = dns_request_createvia3(requestmgr, msg, srcaddr, destaddr,
-					0, NULL, FIND_TIMEOUT * 20,
-					FIND_TIMEOUT, 3, global_task, recvsoa,
-					reqinfo, request);
+	result = dns_request_createvia3(requestmgr, msg, srcaddr, destaddr, 0,
+					(userserver != NULL) ? tsigkey : NULL,
+					FIND_TIMEOUT * 20, FIND_TIMEOUT, 3,
+					global_task, recvsoa, reqinfo, request);
 	check_result(result, "dns_request_createvia");
 	requests++;
 }