This post may be older already but I observed similar problems signing a dnssec key with plesk on Ubuntu 22.04. What I found out is that plesk generates the keys in /var/named/run-root/var/keys/'DOMAIN'. In my case Plesk left the ownership after key creation at root:root instead of bind:bind...