ICANN has announced the schedule to generate the next KSK.
Generating a new KSK restarts the process announced last year, which was suspended after it was identified that a supplier of key equipment used to store the KSK (known as a Hardware Security Module, or HSM) would be exiting the business during the expected lifespan of the new KSK.
The next KSK will be generated on new Thales Luna USB G7 HSMs.
The announcement and information regarding the new HSMs is published at https://www.icann.org/en/announcements/details/icann-to-generate-new-dns-cr….
James Mitchell
IANA
Hi,
ICANN announced that IANA planed to start pre-publish the new KSK in
the DNS in January 2024, but I haven't found it in the root zone yet.
Does anyone know the current status?
ICANN Announces Schedule to Generate New Keys for KSK Key Rollover
https://www.icann.org/en/announcements/details/icann-announces-schedule-to-…
--
Yasuhiro 'Orange' Morishita <yasuhiro(a)jprs.co.jp>
