Skip to main content
DNSSEC

Key rollover

Definition, context, related terminology, and source references for Key rollover.

Definition

The planned replacement of a DNSSEC key while maintaining a valid chain of trust and continuous validation. Rollovers require timing that accounts for TTLs, signature validity, parent DS updates, and publication overlap.