ICANN - Internet Corporation for Assigned Names and Numbers
ICANN - Internet Corporation for Assigned Names and Numbers
07/27/2026 | Press release | Distributed by Public on 07/27/2026 09:04
ICANN Releases Updated Root KSK Rollover Guide for the Community
The Internet Corporation for Assigned Names and Numbers (ICANN) has published an updated guide, What to Expect During the Root KSK Rollover, to help the technical community and broader Internet ecosystem prepare for the next Root Key Signing Key (KSK) rollover.
The 2026 update reflects ICANN's ongoing work to support the security and resiliency of the Domain Name System (DNS). It explains what to expect during a future rollover of the cryptographic key at the top of the Domain Name System Security Extensions (DNSSEC) trust chain and outlines practical steps DNS operators can take to prepare.
The Root KSK plays a critical role in DNSSEC by helping validate DNS information and protect users from being directed to fraudulent or altered online destinations. KSK rollovers are carefully planned and an important part of maintaining long-term trust in the DNS.
The updated guide is designed for a broad audience, including operators of validating recursive resolvers, technical community members, researchers monitoring DNS behavior, and journalists covering Internet infrastructure and security.
For most Internet users, a Root KSK rollover is expected to happen without disruption. Users whose recursive resolvers are correctly configured and have updated trust anchors reflecting the new Root KSK should see no change. However, operators of validating resolvers should confirm their systems' trust anchors are updated with the new Root KSK. Resolvers that are not properly configured may experience DNS resolution failures during a rollover.
ICANN continues this work through the Internet Assigned Numbers Authority functions and regular public KSK ceremonies, which securely manage and safeguard the Root KSK. These ceremonies are a key part of the DNSSEC trust model and carried out transparently with community participation.
The updated guide is part of ICANN's broader effort to support awareness and readiness across the Internet ecosystem. ICANN encourages DNS operators and interested community members to review the guide and stay informed as planning continues for the next Root KSK rollover.
Visit our dedicated page to learn more about the Root KSK rollover and to access additional resources.
About ICANN
ICANN's mission is to help ensure a stable, secure, and unified global Internet. To reach another person on the Internet, you need to type an address - a name or a number - into your computer or other device. That address must be unique so computers know where to find each other. ICANN helps coordinate and support these unique identifiers across the world. ICANN was formed in 1998 as a nonprofit public benefit corporation with a community of participants from all over the world.
ICANN - Internet Corporation for Assigned Names and Numbers published this content on July 27, 2026, and is solely responsible for the information contained herein. Distributed via Public Technologies (PUBT), unedited and unaltered, on July 27, 2026 at 15:04 UTC. If you believe the information included in the content is inaccurate or outdated and requires editing or removal, please contact us at [email protected]