diff --git a/ipaserver/install/opendnssecinstance.py b/ipaserver/install/opendnssecinstance.py
index 383de7768..c92818f1a 100644
--- a/ipaserver/install/opendnssecinstance.py
+++ b/ipaserver/install/opendnssecinstance.py
@@ -168,6 +168,9 @@ class OpenDNSSECInstance(service.Service):
         if not self.fstore.has_file(paths.OPENDNSSEC_KASP_FILE):
             self.fstore.backup_file(paths.OPENDNSSEC_KASP_FILE)
 
+        if not self.fstore.has_file(paths.OPENDNSSEC_ZONELIST_FILE):
+            self.fstore.backup_file(paths.OPENDNSSEC_ZONELIST_FILE)
+
         pin_fd = open(paths.DNSSEC_SOFTHSM_PIN, "r")
         pin = pin_fd.read()
         pin_fd.close()
@@ -354,7 +357,8 @@ class OpenDNSSECInstance(service.Service):
                                  paths.IPA_KASP_DB_BACKUP)
 
         for f in [paths.OPENDNSSEC_CONF_FILE, paths.OPENDNSSEC_KASP_FILE,
-                  paths.OPENDNSSEC_KASP_DB, paths.SYSCONFIG_ODS]:
+                  paths.OPENDNSSEC_KASP_DB, paths.SYSCONFIG_ODS,
+                  paths.OPENDNSSEC_ZONELIST_FILE]:
             try:
                 self.fstore.restore_file(f)
             except ValueError as error: