diff --git a/lib/dns/keystore.c b/lib/dns/keystore.c
index a08846e37e..281338de4c 100644
--- a/lib/dns/keystore.c
+++ b/lib/dns/keystore.c
@@ -229,7 +229,7 @@ dns_keystore_keygen(dns_keystore_t *keystore, const dns_name_t *origin,
 			return result;
 		}
 		isc_log_write(DNS_LOGCATEGORY_DNSSEC, DNS_LOGMODULE_DNSSEC,
-			      ISC_LOG_ERROR,
+			      ISC_LOG_DEBUG(3),
 			      "keystore: generated PKCS#11 object %s", label);
 	} else {
 		result = dst_key_generate(origin, alg, size, 0, flags,