Updated DNSSEC KSK Rollover Information

Posted: Wednesday, 02 June 2010

ARIN is notifying the community that it has just increased the KSK rollover period from one to two years.* We have increased the rollover period as a cautionary measure to mitigate additional load on authoritative nameservers.

For more information about ARIN's DNSSEC key maintenance procedure please see:


Mark Kosters
Chief Technology Officer
American Registry for Internet Numbers (ARIN)

*We anticipate that our parent zone (in-addr.arpa) will be signed within two years and rollovers will then be transparent to the community, i.e.they would not involve manual reconfiguration at each key rollover event.