ICANN - Internet Corporation for Assigned Names and Numbers
ICANN - Internet Corporation for Assigned Names and Numbers
10/15/2026 | Press release | Distributed by Public on 10/15/2026 09:01
ICANN Reports Root Zone KSK Rollover Completed as Planned
The Internet Corporation for Assigned Names and Numbers (ICANN) reports that the scheduled rollover of the cryptographic key that helps protect the Domain Name System (DNS) was completed on 11 October 2026. ICANN is aware of reports of issues affecting a limited number of systems following the transition and continues to assess their potential relationship to the rollover. ICANN will continue monitoring the DNS ecosystem as the rollover process progresses through its remaining operational milestones.
The cryptographic key, known as the root zone key signing key (KSK), plays a critical role in DNS Security Extensions (DNSSEC). As the trust anchor for the DNS root zone, it enables DNS resolvers to validate information, helping to protect Internet users by ensuring responses have not been modified in transit. Periodically replacing the root zone KSK is an important security best practice that helps maintain the security and resiliency of the DNS while validating the operational processes used to manage one of the Internet's most critical cryptographic keys.
The KSK rollover was carried out according to established operational procedures and with coordination across the global technical community. Internet service providers, resolver software developers, network operators, equipment vendors, and other DNS operators played an important role in ensuring that systems supporting DNSSEC remain prepared for routine KSK rollovers.
As part of the standard Root Zone KSK rollover process, additional operational milestones remain, including the scheduled revocation of the previous KSK in January 2027. ICANN will continue monitoring the DNS ecosystem and working closely with the global technical community to identify and address any unexpected issues that may arise throughout the remainder of the rollover process.
Following the first root zone KSK rollover in 2018, periodic KSK rollovers have become an established part of DNSSEC operations. Regularly replacing the root zone KSK helps ensure that the procedures, software, and systems supporting the DNSSEC trust chain continue to operate as intended while reinforcing operational readiness across the Internet ecosystem.
DNS operators should continue following previously published operational guidance and remain aware of upcoming milestones in the rollover process.
Additional information about the root zone KSK, DNSSEC, and root zone KSK rollovers is available on the IANA website.
About ICANN
ICANN's mission is to help ensure a stable, secure, and unified global Internet. To reach another person on the Internet, you need to type an address - a name or a number - into your computer or other device. That address must be unique so computers know where to find each other. ICANN helps coordinate and support these unique identifiers across the world. ICANN was formed in 1998 as a nonprofit public benefit corporation with a community of participants from all over the world.
ICANN - Internet Corporation for Assigned Names and Numbers published this content on October 15, 2026, and is solely responsible for the information contained herein. Distributed via Public Technologies (PUBT), unedited and unaltered, on October 15, 2026 at 15:01 UTC. If you believe the information included in the content is inaccurate or outdated and requires editing or removal, please contact us at [email protected]