diff --git a/etc/unbound/unbound.conf.d/alone.conf b/etc/unbound/unbound.conf.d/alone.conf
index fceea8fa..fbd9fa86 100644
--- a/etc/unbound/unbound.conf.d/alone.conf
+++ b/etc/unbound/unbound.conf.d/alone.conf
@@ -3,7 +3,7 @@
 server:
     # perform cryptographic DNSSEC validation using the root trust anchor.
     # this should be in /etc/unbound/unbound.conf.d/root-auto-trust-anchor-file.conf
-    # auto-trust-anchor-file: "/var/lib/unbound/root.key"
+    auto-trust-anchor-file: "/var/lib/unbound/root.key"
     #interface: 127.0.0.1
     access-control: 127.0.0.0/8 allow
     #interface: ::1