Notice to telecommunications operators, internet service providers, system administrators, and all organizations using DNSSEC

The KSK rollover is a planned process designed to maintain the security, stability, and reliability of the global Domain Name System (DNS). This change is particularly important for organizations operating validating recursive DNS resolvers, especially those that use:

 

• manually configured Trust Anchors;
• outdated software;
• custom DNSSEC configurations.

Organizations that do not complete the required updates in time may experience DNS resolution failures after October 11, 2026.

All relevant organizations are therefore advised to check their infrastructure readiness in advance, ensure that the automatic Trust Anchor update mechanism is functioning correctly, and, where necessary, update their software and DNSSEC configuration.

Detailed information on the KSK rollover process, technical recommendations, implementation schedule, frequently asked questions, and an informational video for operators is available at the following links:

https://www.icann.org/resources/press-material/release-2026-05-20-en
https://www.icann.org/resources/pages/ksk-rollover-en — description of the KSK rollover process
https://www.youtube.com/watch?v=Hq-qnAZAURY — video for operators