diff --git a/unbound/templates/unbound.conf.j2 b/unbound/templates/unbound.conf.j2
index baf80564..44f8ba41 100644
--- a/unbound/templates/unbound.conf.j2
+++ b/unbound/templates/unbound.conf.j2
@@ -15,7 +15,7 @@ server:
 	
 	# root-hints: "/var/unbound/etc/named.cache"
 	# Uncomment to enable DNSSEC validation.
-	#auto-trust-anchor-file: "/var/unbound/db/root.key"
+	auto-trust-anchor-file: "/var/unbound/db/root.key"
 	# Serve zones authoritatively from Unbound to resolver clients.
 	# Not for external service.