I see, reviewing the ISC web site, that dnssec-makekeyset was intentionally removed and that somehow the appropriate keyset file is magically created by the remaining utilities in a way that isn't very well explained by any of the documentation I could find…
Anyway, I am running fine now and the software is "working as designed." Please close this incident.
Thanks,
Scott
