Usage: DnsCmd /OfflineSign /SignZone /Input /Output /Zone /KeySetDir /GenKeySet /SoaSerial /Dnskey /Ds /AddKey /Signkey /ValidFrom ...

Usage: 
 DnsCmd /OfflineSign /SignZone /Input  /Output 
 /Zone  [/KeySetDir ] [/GenKeySet ] 
 [/SoaSerial ] [/Dnskey ] [/Ds ] 
 /AddKey []  
 /Signkey [] [/ValidFrom ] [/ValidTo ] 
     []  ... 

       -- input zone file.  It can be signed or unsigned.
      -- path and file name for the signed zone file
        -- name of the zone to be signed
       -- directory that contains the key set files from signed
                     child zones for creating secure delegation.  The key set
                     file name is the zone name appended to "keyset-".
       -- one of the following values:
                     "None": Do not generate key set file for the zone being
                             signed.
                     "KSK": Generate key set file for the zone being signed.
                            All KSKs will be put in the key set file.
                     "AllKeys": Generate key set file for the zone being
                                signed. All keys will be put in the key set
                                file.
                     If no  parameter is given, KSKs will be put
                     into the key set file.
       -- one of the following values:
                     "Keep": The original SOA record serial number will be
                             kept.
                     "Increment": the SOA record serial number will be
                                  incremented before signing.
                     If no /SoaSerial is given, Increment will be the
                     default.
          -- one of the following values:
                     "NoChange": The signing process will not change the
                                 DNSKEY record set at the zone root.
                     "Add": The signing process will add new DNSKEY records
                            to the DNSKEY record set at the zone root.
                     "Replace": If the input zone file contains DNSKEY record
                                set at zone root, it will be removed and new
                                DNSKEY records will be added during signing.
                     If no  option is given, "Replace" will be the
                     default.
              -- one of the following values:
                     "NoChange": The signing process will not change the
                                 DS record set at delegation points.
                     "Add": The signing process will add new DS records to
                            delegation points based on key set files in the
                            key set directory.
                     "Replace": If the input zone file contains DS record
                                set at delegation points, they will be removed
                                and new DS records will be created at the
                                delegation point based on the key set files
                                in the key set directory.
                     If no  parameter is given, "Replace" will be the
                     default.