[sdnog] FW: ICANN Launches Testing Platform for the KSK Rollover

[Salih Shihab]

thanks Fahad for updates 
----- Original Message -----

From: "Fahd Batayneh" <fahd.batayneh at icann.org> 
To: "Sudan NOG" <sdnog at sdnog.sd> 
Sent: Monday, March 13, 2017 2:04:21 PM 
Subject: [sdnog] FW: ICANN Launches Testing Platform for the KSK Rollover 

ICANN News Alert 


ICANN Launches Testing Platform for the KSK Rollover. This is important for those who have DNSSEC deployments as part of their operations. 



Fahd Batayneh 

ICANN 




Date: Monday, March 13, 2017 at 12:38 PM 
Subject: ICANN News Alert -- ICANN Launches Testing Platform for the KSK Rollover 






News Alert 


https://www.icann.org/news/announcement-2017-03-13-en 

ICANN Launches Testing Platform for the KSK Rollover 


13 March 2017 

13 March 2017 – ICANN is offering a testing platform for network operators and other interested parties to confirm that their systems can handle the automated update process for the upcoming Root Zone Domain Name Systems Security Extensions (DNSSEC) Key Signing Key (KSK) rollover. The KSK rollover is currently scheduled for 11 October 2017. 

"Currently, seven hundred and fifty million people are using DNSSEC-validating resolvers that could be affected by the KSK rollover," said ICANN's Vice President of Research, Matt Larson. "The testing platform is an easy way for operators to confirm that their infrastructure supports the ability to handle the rollover without manual intervention." 

Internet service providers, network operators and others who have enabled DNSSEC validation must update their systems with the new KSK. This can be done in one of two ways: 

    * An operator can configure a new trust anchor manually by obtaining the new root zone KSK from the iana.org website at https://www.iana.org/dnssec/files . 
    * An operator can enable a feature available in many validating resolvers that automatically detects and configures a new root zone KSK as a trust anchor, in which case they need take no action. 



Check to see if your systems are ready by visiting go.icann.org/KSKtest . 

The KSK has been widely distributed and configured by every operator performing DNSSEC validation. If the validating resolvers using DNSSEC do not have the new key when the KSK is rolled, end users relying on those resolvers will encounter errors and be unable to access the Internet. A careful and coordinated effort is required to ensure that the update does not interfere with normal operations. 

More information is available at www.icann.org/kskroll . 

_______________________________________________ 
sdnog mailing list 
sdnog at sdnog.sd 
http://lists.sdnog.sd/mailman/listinfo/sdnog 



-- 

	
	
Salih S. M. Abdelhameed | Head of Project Department 
Sudanese Research and Education Network | Address 
Nile St. | University of Khartoum 
Tel: +2491556620 71 | Mob: +24912 3788843 



-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.sdnog.sd/pipermail/sdnog/attachments/20170313/5cd9e74d/attachment.html>