[AfrICANN-discuss] DNSSEC Root Zone KSK Rollover 2026: What Operators Need to Know; Webinar on 26 August

[Yaovi Atohoun]

Dear all,

I trust this finds you well.

Later this year, an important update will take place in the Internet’s Domain Name System.

On 11 October 2026, the new DNSSEC Root Zone Key Signing Key, known as KSK-2024, is scheduled to begin signing the DNS root zone. This is part of the planned rollover of the cryptographic trust anchor used in DNS Security Extensions, or DNSSEC.

DNSSEC helps protect the integrity of DNS data by allowing DNS responses to be validated. This helps reduce the risk of users being directed to the wrong online destination because DNS data has been altered or spoofed.

For most Internet users, this change should be invisible and requires no action.

However, organizations that operate DNS infrastructure, Internet Service Providers, enterprises, and others running validating recursive resolvers should confirm that their systems trust the new key before the rollover. Systems that rely on outdated or manually configured trust anchors may experience DNS resolution issues if they are not updated before the transition.

Before this date, operators are encouraged to:


  *   review their recursive resolver’s DNSSEC configurations;
  *   confirm that automated trust-anchor updates are working correctly;
  *   ensure their systems trust the new key, KSK-2024;
  *   share this information with relevant network, DNS, and security teams.

The current key, KSK-2017, is scheduled to be revoked on 11 January 2027. This provides a transition period for operators to complete any necessary updates.

The KSK rollover is part of the technical coordination needed to maintain the long-term security, stability, and resilience of the Internet’s naming system. It is also a useful reminder of the role DNSSEC plays in supporting a secure and trusted Internet.

For more information and technical guidance, please visit the ICANN KSK Rollover Information Page: <https://www.icann.org/resources/pages/ksk-rollover-en> https://www.icann.org/resources/pages/ksk-rollover-en

ICANN is organizing a webinar on the same topic on Wednesday 26 August 2026 at 12.00 – 13.00 PM UTC. More information about the webinar including agenda and registration can be found at https://www.icann.org/en/engagement-calendar/details/emea-webinar-series-ksk-rollover-2026-2026-08-26.

More blogs on the KSK Rollover:


  *   Keeping the DNS Reliable: Understanding the KSK Rollover<https://www.icann.org/en/blogs/details/keeping-the-dns-reliable-understanding-the-ksk-rollover-07-05-2026-en>
  *   Preparing for the Root Zone KSK Rollover: What You Need to Know<https://www.icann.org/en/blogs/details/preparing-for-the-root-zone-ksk-rollover-what-you-need-to-know-27-07-2026-en>

CALL TO ACTION >> Kindly share this email with anyone within your circles you see relevant.

Should you have any questions related to this update, please don’t hesitate to contact ICANN Global Support at globalsupport at icann.org<mailto:globalsupport at icann.org> with "KSK Rollover" in the subject line.

Regards
--
Yaovi Atohoun
Director Stakeholder Engagement & Operations for Africa – ICANN
www.icann.org


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.afrinic.net/pipermail/africann/attachments/20260803/7de0f0ff/attachment-0001.html>