ICANN Publishes Root KSK Rollover Guidance
Analysis based on 8 articles · First reported Jul 20, 2026 · Last updated Aug 12, 2026
The event is a routine technical procedure with minimal direct market impact, but it underscores the importance of DNSSEC security for the stability of the Internet. Companies operating DNS infrastructure may need to allocate resources for preparation, but no significant financial disruption is expected.
On August 11, 2026, the Internet Corporation for Assigned Names and Numbers (ICANN) published updated guidance titled 'What to Expect During the Root KSK Rollover' to help the global Internet community prepare for the upcoming Root Zone Key Signing Key (KSK) rollover scheduled for October 11, 2026. The guide, available in all six United Nations languages and Portuguese, builds on experience from the 2018 rollover and explains potential effects on DNSSEC-validating resolvers, what affected users may experience, and how resolver operators can identify and address failures. It includes recommendations for preparing systems, explains automated trust anchor updates, identifies when manual action may be required, and answers common operational questions. The new root KSK (KSK-2024) will become the active key used to sign the root zone on October 11, 2026. ICANN supports the technical community through updated documentation, FAQs, instructional videos, webinars, technical presentations, and direct engagement with network operators, Internet service providers, governments, and other stakeholders. Kim Davis, Vice President of IANA Services and President of PTI, emphasized the importance of preparation to ensure the rollover's success. The rollover is designed to minimize impact for properly configured DNSSEC validation, but operators of validating resolvers must confirm their trust anchors are updated to avoid DNS resolution failures.
Set up alerts, explore entity relationships, search across thousands of events, and build custom intelligence feeds.
Open Dashboard