ICANN Sets 11 October 2026 DNS Key Rollover to Strengthen Internet Security
Updated
Updated · PR Newswire · May 20
ICANN Sets 11 October 2026 DNS Key Rollover to Strengthen Internet Security
3 articles · Updated · PR Newswire · May 20
11 October 2026 is the date ICANN set to replace the DNSSEC root zone Key Signing Key, the trust anchor used to verify that DNS responses are authentic.
The rollover is meant to preserve long-term cryptographic security for the global DNS, with the new key published well in advance so operators can update systems and test automated trust-anchor updates.
Recursive resolver operators — especially those using manually configured trust anchors or older software — were urged to verify readiness, because systems that do not trust the new key could fail DNS resolution after the switch.
The phased process began in 2024, both keys will remain valid until the new KSK starts signing the root zone in October 2026, and the old key is scheduled for retirement in January 2027.
How will new website certificate rules amplify the fallout from the internet's biggest security update in years?
With conflicting data suggesting low readiness, is the internet heading for a major outage on October 11th?