preparing for the root ksk rollover, 11 october 2017...| 3 what you need to know; changing the root...

4
Preparing for the Root KSK Rollover, 11 October 2017 Adam Peake, ICANN Civil Society Engagement | 31 May 2017

Upload: others

Post on 14-Aug-2020

5 views

Category:

Documents


0 download

TRANSCRIPT

Page 1: Preparing for the Root KSK Rollover, 11 October 2017...| 3 What you need to know; changing the root key signing key •ICANN is changing (rolling) the top cryptographic key used in

PreparingfortheRootKSKRollover,11October2017

AdamPeake,ICANNCivilSocietyEngagement|31May2017

Page 2: Preparing for the Root KSK Rollover, 11 October 2017...| 3 What you need to know; changing the root key signing key •ICANN is changing (rolling) the top cryptographic key used in
Page 3: Preparing for the Root KSK Rollover, 11 October 2017...| 3 What you need to know; changing the root key signing key •ICANN is changing (rolling) the top cryptographic key used in

| 3

Whatyouneedtoknow;changingtherootkeysigningkey

• ICANNischanging(rolling)thetopcryptographickeyusedintheDNSprotocol

• anewcryptographickeypairwillbegenerated,thenewpubliccomponentdistributedtoDNSSECvalidatingresolvers

• ifyoudon'tuseDNSSECyoursystemwillnotbeaffectedbytherollover

• ifyoursoftwaresupportsautomatedupdatesofDNSSECtrustanchors,therootzoneKSKwillbeupdateautomatically

• Ifyousoftwaredoesnotsupportautomatedupdatesornotconfiguredtouseit,manuallyupdatethesoftware'strustanchor–availableherehttp://data.iana.org/root-anchors

• KSKrolloverwilloccur11October2017– updateanytimebeforetherollover

Page 4: Preparing for the Root KSK Rollover, 11 October 2017...| 3 What you need to know; changing the root key signing key •ICANN is changing (rolling) the top cryptographic key used in

| 4

Thankyou

• Moreinformation:http://www.icann.org/kskroll

• Updatesoftware:http://data.iana.org/root-anchors

• Testbed:http://go.icann.org/KSKtest

• Contact:[email protected] (subjectKSKrollover)

• Questions:[email protected] (I'llmakesureyougetanswers)