Important Notice: Our web hosting provider recently started charging us for additional visits, which was unexpected. In response, we're seeking donations. Depending on the situation, we may explore different monetization options for our Community and Expert Contributors. It's crucial to provide more returns for their expertise and offer more Expert Validated Answers or AI Validated Answers. Learn more about our hosting issue here.

What are the steps to perform a prepublish ZSK rollover on the .gov TLD?

April 26, 2017perform rollover steps TLD zsk

0

Posted

What are the steps to perform a prepublish ZSK rollover on the .gov TLD?

1 Answer

0

Posted

• Generate a new ZSK • Include this key in your zone file and continue to single ZSK sign file with old ZSK and KSK • If you are using the .gov Registar Monitor service, wait up to 24 hours for an email notification that new ZSK was found in your zone and if it meets minimum standards. • Continue prepublished for up to 2*TTL + 1 Day while DNS propagates. • Remove old ZSK from zone file and single sign with prepublished ZSK and existing KSK. • (Optional) Generate new ZSK and prepublish by replacing old ZSK prior to step 5 to cut labor in half and return to repeat this step and 5 whenever a ZSK rollover is needed.