diff --git a/CHANGES b/CHANGES
index 27869baad0..0af2ea621c 100644
--- a/CHANGES
+++ b/CHANGES
@@ -1,3 +1,8 @@
+4945.	[func]		BIND can no longer be built without DNSSEC support.
+			A cryptography provder (i.e., OpenSSL or a hardware
+			service module with PKCS#11 support) must be
+			available. [GL #244]
+
 4944.	[cleanup]	Silence cppcheck portability warnings in
 			lib/isc/tests/buffer_test.c. [GL #239]
 
diff --git a/doc/arm/notes.xml b/doc/arm/notes.xml
index a5f0cd53be..e0a37f8728 100644
--- a/doc/arm/notes.xml
+++ b/doc/arm/notes.xml
@@ -132,6 +132,13 @@
 
   <section xml:id="relnotes_changes"><info><title>Feature Changes</title></info>
     <itemizedlist>
+      <listitem>
+	<para>
+	  BIND can no longer be built without DNSSEC support. A cryptography
+	  provder (i.e., OpenSSL or a hardware service module with
+	  PKCS#11 support) must be available. [GL #244]
+	</para>
+      </listitem>
       <listitem>
 	<para>
 	  Zone types <command>primary</command> and