[AfrICANN-discuss] DNSSEC Root Zone KSK Rollover 2026: What Operators Need to Know; Webinar on 26 August

[Barrack Otieno]

Dear Yaovi,

This is noted with thanks.

Best Regards

On Mon, Aug 3, 2026 at 4:59 PM Yaovi Atohoun <yaovi.atohoun at icann.org>
wrote:

> Dear all,
>
>
>
> I trust this finds you well.
>
>
>
> Later this year, an important update will take place in the Internet’s
> Domain Name System.
>
>
>
> On 11 October 2026, the new DNSSEC Root Zone Key Signing Key, known as
> KSK-2024, is scheduled to begin signing the DNS root zone. This is part of
> the planned rollover of the cryptographic trust anchor used in DNS Security
> Extensions, or DNSSEC.
>
>
>
> DNSSEC helps protect the integrity of DNS data by allowing DNS responses
> to be validated. This helps reduce the risk of users being directed to the
> wrong online destination because DNS data has been altered or spoofed.
>
>
>
> For most Internet users, this change should be invisible and requires no
> action.
>
>
>
> However, organizations that operate DNS infrastructure, Internet Service
> Providers, enterprises, and others running validating recursive resolvers
> should confirm that their systems trust the new key before the rollover.
> Systems that rely on outdated or manually configured trust anchors may
> experience DNS resolution issues if they are not updated before the
> transition.
>
>
>
> Before this date, operators are encouraged to:
>
>
>
>    - review their recursive resolver’s DNSSEC configurations;
>    - confirm that automated trust-anchor updates are working correctly;
>    - ensure their systems trust the new key, KSK-2024;
>    - share this information with relevant network, DNS, and security
>    teams.
>
>
>
> The current key, KSK-2017, is scheduled to be revoked on 11 January 2027.
> This provides a transition period for operators to complete any necessary
> updates.
>
>
>
> The KSK rollover is part of the technical coordination needed to maintain
> the long-term security, stability, and resilience of the Internet’s naming
> system. It is also a useful reminder of the role DNSSEC plays in supporting
> a secure and trusted Internet.
>
>
>
> For more information and technical guidance, please visit the ICANN KSK
> Rollover Information Page:
> <https://www.icann.org/resources/pages/ksk-rollover-en>
> https://www.icann.org/resources/pages/ksk-rollover-en
>
>
>
> ICANN is organizing a webinar on the same topic on Wednesday 26 August
> 2026 at 12.00 – 13.00 PM UTC. More information about the webinar including
> agenda and registration can be found at
> https://www.icann.org/en/engagement-calendar/details/emea-webinar-series-ksk-rollover-2026-2026-08-26
> .
>
>
>
> More blogs on the KSK Rollover:
>
>
>
>    - Keeping the DNS Reliable: Understanding the KSK Rollover
>    <https://www.icann.org/en/blogs/details/keeping-the-dns-reliable-understanding-the-ksk-rollover-07-05-2026-en>
>    - Preparing for the Root Zone KSK Rollover: What You Need to Know
>    <https://www.icann.org/en/blogs/details/preparing-for-the-root-zone-ksk-rollover-what-you-need-to-know-27-07-2026-en>
>
>
>
> CALL TO ACTION >> Kindly share this email with anyone within your circles
> you see relevant.
>
>
>
> Should you have any questions related to this update, please don’t
> hesitate to contact ICANN Global Support at globalsupport at icann.org with
> "KSK Rollover" in the subject line.
>
>
>
> Regards
>
> --
>
> Yaovi Atohoun
>
> Director Stakeholder Engagement & Operations for Africa – ICANN
>
> www.icann.org
>
>
>
>
> _______________________________________________
> AfrICANN mailing list
> AfrICANN at afrinic.net
> https://lists.afrinic.net/mailman/listinfo/africann
>


-- 
Barrack O. Otieno
+254721325277
+254733206359
Skype: barrack.otieno
PGP ID: 0x2611D86A
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.afrinic.net/pipermail/africann/attachments/20260804/becc2c1d/attachment.html>