First KSK Rollover Project (2015-2018)

Commencing in 2015, a community design team was formed to develop recommendations on how to perform the first "KSK rollover", replacing the Root Zone Key Signing Key as required by our DNSSEC Practice Statement. These recommendations were operationalized, and the first KSK rollover resulted in the generation of a new KSK in October 2016, and replacing the KSK in the root zone in October 2018.

• Root KSK Rollover Project Page — Find detailed information on the planning and implementation of this project.
• Root KSK Rollover Plan (Design Team Recommendations, 2016-03-07)