DNS Root Zone KSK Rollover postponed

On September 27 ICANN announced that it is postponing the plan to roll, or change, the 'apex' cryptographic key used in the DNSSEC protocol, commonly known as the Root Zone KSK (Key Signing Key).

The KSK Rollover was due to occur on 11 October 2017. This will now be postponed to allow more time for network operators using DNSSEC-validating resolvers to update their systems with the new KSK.

A new date has not yet been set, however ICANN's announcement says it is tentatively aiming for Q1 2018:

https://www.icann.org/news/announcement-2017-09-27-en

All network operators using DNSSEC-validating resolvers are encouraged to update their DNS resolver systems with the new KSK in preparation for the new Rollover date.

For more information, visit the LACNIC website for KSK Rollover resources: http://www.lacnic.net/1041/2/lacnic/dns-root-zone-ksk-rollover

If you have additional questions, please contact ICANN via email at
globalsupport@icann.org with "KSK Rollover" in the subject line.