ICANN Preps for October 2026 Root KSK Rollover with Updated Guidance
Event summary
- ICANN published updated guidance on August 11, 2026 to prepare for the Root Zone Key Signing Key (KSK) rollover scheduled for October 11, 2026.
- The guide is available in all six UN languages and Portuguese, building on lessons from the 2018 rollover.
- The root KSK (KSK-2024) will replace the current key to secure the DNS root zone through DNSSEC.
- Organizations operating DNSSEC-validating recursive resolvers must verify system configurations before October 11, 2026.
The big picture
ICANN's guidance for the Root KSK rollover underscores the critical need for proactive cybersecurity measures in maintaining the stability of the global Internet. This event highlights the ongoing shift towards more frequent cryptographic key updates as a standard practice to safeguard DNS infrastructure, reflecting broader trends in digital security governance.
What we're watching
- System Readiness
- How quickly organizations operating DNSSEC-validating recursive resolvers can prepare their systems before the October deadline.
- Impact Minimization
- Whether ICANN's guidance will effectively reduce disruptions for Internet users and organizations during the rollover.
- Long-term Security
- The pace at which periodic KSK rollovers become standard practice to maintain DNS security and resilience.