1. A DNSSEC signing server configured to interact with at least one DNSSEC client application and a plurality of digital signature modules, the DNSSEC signing server comprising: a processor; and a storage device including computer readable code that, when executed by the processor, causes the signing server act as an authoritative server to: receive a signing request from the at least one client application to sign first data; determine at least one of an active KSK and an active ZSK for the first data; transmit the first data to one of the plurality of digital signature modules; receive a digitally signed version of the first data, from the digital signature module; and provide the signed first data, to the client application.