Operational Plans for the Root KSK Rollover
This page lists the various documents that are used in the planning and execution of the root KSK roll. The original plan for rolling the root DNS key would have had the key rolled on 11 October 2017, but that plan was postponed on 27 September 2017. After extensive community review, the rollover happened on 11 October 2018.
The operational plans used in 2018 are:
- 2018 KSK Rollover Operational Implementation Plan – Describes in detail the operational steps to accomplish the root KSK rollover.
- 2018 KSK Rollover Back Out Plan – Describes how to handle deviations from the Operational Implementation Plan based on anomalies occurring while executing the operational plan.
- 2018 KSK Rollover Monitoring Plan – Describes the plan to monitor the effects of changing the trust anchor for the root zone in the traffic towards root servers.
- 2018 KSK Outreach Plan – Describes how ICANN publicized the roll in order to have resolver operators better prepared.
- Steps of the KSK Roll Already Performed in 2017 – Describes what already took place in 2017 preparing for the KSK roll.
Discussion of the plan takes place on the ksk-rollover mailing list.
The original operational plans for 2017 were:
- 2017 KSK Rollover Operational Implementation Plan – Describes in detail the operational steps to accomplish the 2017 KSK Roll project, including the timeline of the eight phase process.
- 2017 KSK Rollover Back Out Plan – Describes anticipated deviations from the Operational Implementation Plan based on anomalies occurring while executing the operational plan.
- 2017 KSK Rollover External Test Plan – Covers the preparation of operational test environments, accessed by the general Internet public, to evaluate whether external systems are prepared to participate in the KSK roll.
- 2017 KSK Rollover Monitoring Plan – Describes the plan to monitor the effects of changing the trust anchor for the root zone in the traffic towards root servers.
- 2017 KSK Rollover Systems Test Plan – Describes the actions needed to test changes to ICANN's infrastructure involved in the KSK roll.