What is a key rollover and how often should it occur?
Print this Article
Last Updated:
September 1, 2017 3:08 PM
A key rollover is a regeneration of the domain name's digital signature. A Key Signing Key (KSK) is the digital signing key pair and it should be regenerated or rolled over periodically to ensure its integrity.
The National Institute of Standards and Technology (NIST) recommends rolling the zone signature key every 30 to 90 days.
