4
Preparing for the Root KSK Rollover, 11 October 2017 Adam Peake, ICANN Civil Society Engagement | 31 May 2017

Preparing for the Root KSK Rollover, 11 October 2017...| 3 What you need to know; changing the root key signing key •ICANN is changing (rolling) the top cryptographic key used in

  • Upload
    others

  • View
    5

  • Download
    0

Embed Size (px)

Citation preview

Page 1: Preparing for the Root KSK Rollover, 11 October 2017...| 3 What you need to know; changing the root key signing key •ICANN is changing (rolling) the top cryptographic key used in

PreparingfortheRootKSKRollover,11October2017

AdamPeake,ICANNCivilSocietyEngagement|31May2017

Page 2: Preparing for the Root KSK Rollover, 11 October 2017...| 3 What you need to know; changing the root key signing key •ICANN is changing (rolling) the top cryptographic key used in
Page 3: Preparing for the Root KSK Rollover, 11 October 2017...| 3 What you need to know; changing the root key signing key •ICANN is changing (rolling) the top cryptographic key used in

| 3

Whatyouneedtoknow;changingtherootkeysigningkey

• ICANNischanging(rolling)thetopcryptographickeyusedintheDNSprotocol

• anewcryptographickeypairwillbegenerated,thenewpubliccomponentdistributedtoDNSSECvalidatingresolvers

• ifyoudon'tuseDNSSECyoursystemwillnotbeaffectedbytherollover

• ifyoursoftwaresupportsautomatedupdatesofDNSSECtrustanchors,therootzoneKSKwillbeupdateautomatically

• Ifyousoftwaredoesnotsupportautomatedupdatesornotconfiguredtouseit,manuallyupdatethesoftware'strustanchor–availableherehttp://data.iana.org/root-anchors

• KSKrolloverwilloccur11October2017– updateanytimebeforetherollover

Page 4: Preparing for the Root KSK Rollover, 11 October 2017...| 3 What you need to know; changing the root key signing key •ICANN is changing (rolling) the top cryptographic key used in

| 4

Thankyou

• Moreinformation:http://www.icann.org/kskroll

• Updatesoftware:http://data.iana.org/root-anchors

• Testbed:http://go.icann.org/KSKtest

• Contact:[email protected] (subjectKSKrollover)

• Questions:[email protected] (I'llmakesureyougetanswers)