diff --git a/docs/manpages.rst b/docs/manpages.rst
index 1a75a14..d7fb610 100644
--- a/docs/manpages.rst
+++ b/docs/manpages.rst
@@ -8,6 +8,7 @@
     ndnsec-get-default  <manpages/ndnsec-get-default>
     ndnsec-set-default  <manpages/ndnsec-set-default>
     ndnsec-key-gen      <manpages/ndnsec-key-gen>
+    ndnsec-dsk-gen      <manpages/ndnsec-dsk-gen>
     ndnsec-sign-req     <manpages/ndnsec-sign-req>
     ndnsec-cert-gen     <manpages/ndnsec-cert-gen>
     ndnsec-cert-revoke  <manpages/ndnsec-cert-revoke>
diff --git a/docs/manpages/ndnsec-dsk-gen.rst b/docs/manpages/ndnsec-dsk-gen.rst
new file mode 100644
index 0000000..1b87669
--- /dev/null
+++ b/docs/manpages/ndnsec-dsk-gen.rst
@@ -0,0 +1,43 @@
+ndnsec-dsk-gen
+==============
+
+``ndnsec-dsk-gen`` is tool to generate a pair of Data-Signing-Key (DSK) for the specified ``identity``
+and sign the generated key using the corresponding Key-Signing-Key (KSK).
+The generated DSK will be set as the default key of the identity.
+
+Usage
+-----
+
+::
+
+    $ ndnsec-dsk-gen [-h] [-t keyType] identity
+
+Description
+-----------
+
+``ndnsec-dsk-gen`` creates a pair of Data-Signing-Key (DSK) for the specified ``identity``
+and sign the generated key using the corresponding Key-Signing-Key (KSK).
+The tool will first check the default KSK of the identity, and then generate a DSK
+and sign the DSK using the KSK.
+The information encoded in the DSK certificate is set the same as the KSK certificate.
+In the end, the DSK is set as the default key of the identity.
+
+Options
+-------
+
+``-t keyType``
+  Specify the key type, ``r`` (default) for RSA and ``e`` for ECDSA.
+
+Examples
+--------
+
+::
+
+    $ ndnsec-dsk-gen /ndn/test
+    OK: dsk certificate with name [/ndn/test/KEY/dsk-1417501749768/ID-CERT/%FD%00%00%01J%09%B02%8B] has been successfully installed
+    $ ndnsec-list -c
+    * /ndn/test
+      +->* /ndn/test/dsk-1417501749768
+           +->* /ndn/test/KEY/dsk-1417501749768/ID-CERT/%FD%00%00%01J%09%B02%8B
+      +->  /ndn/test/ksk-1417475325879
+           +->* /ndn/test/KEY/ksk-1417475325879/ID-CERT/%FD%00%00%01J%09%AE.Y
diff --git a/docs/manpages/ndnsec.rst b/docs/manpages/ndnsec.rst
index 1efc2e1..8641d01 100644
--- a/docs/manpages/ndnsec.rst
+++ b/docs/manpages/ndnsec.rst
@@ -39,6 +39,9 @@
 ndnsec-key-gen_
   Generate a Key-Signing-Key for an identity.
 
+ndnsec-dsk-gen_
+  Generate a Data-Signing-Key (DSK) for an identity and sign the DSK using the corresponding KSK.
+
 ndnsec-sign-req_
   Generate a certificate signing request.
 
@@ -73,6 +76,7 @@
 .. _ndnsec-get-default: ndnsec-get-default.html
 .. _ndnsec-set-default: ndnsec-set-default.html
 .. _ndnsec-key-gen: ndnsec-key-gen.html
+.. _ndnsec-dsk-gen: ndnsec-dsk-gen.html
 .. _ndnsec-sign-req: ndnsec-sign-req.html
 .. _ndnsec-cert-gen: ndnsec-cert-gen.html
 .. _ndnsec-cert-dump: ndnsec-cert-dump.html