preparing for the root ksk rollover, 11 october 2017...| 3 what you need to know; changing the root...
TRANSCRIPT
PreparingfortheRootKSKRollover,11October2017
AdamPeake,ICANNCivilSocietyEngagement|31May2017
| 3
Whatyouneedtoknow;changingtherootkeysigningkey
• ICANNischanging(rolling)thetopcryptographickeyusedintheDNSprotocol
• anewcryptographickeypairwillbegenerated,thenewpubliccomponentdistributedtoDNSSECvalidatingresolvers
• ifyoudon'tuseDNSSECyoursystemwillnotbeaffectedbytherollover
• ifyoursoftwaresupportsautomatedupdatesofDNSSECtrustanchors,therootzoneKSKwillbeupdateautomatically
• Ifyousoftwaredoesnotsupportautomatedupdatesornotconfiguredtouseit,manuallyupdatethesoftware'strustanchor–availableherehttp://data.iana.org/root-anchors
• KSKrolloverwilloccur11October2017– updateanytimebeforetherollover
| 4
Thankyou
• Moreinformation:http://www.icann.org/kskroll
• Updatesoftware:http://data.iana.org/root-anchors
• Testbed:http://go.icann.org/KSKtest
• Contact:[email protected] (subjectKSKrollover)
• Questions:[email protected] (I'llmakesureyougetanswers)