ICANN is planning to roll, or change, the top pair of cryptographic keys used in the DNSSEC protocol, commonly known as the Root Zone KSK (Key Signing Key). This will take place in October 2017 and network operators using DNSSEC-validating resolvers must update their systems with the new KSK to help ensure trouble-free Internet access for users. More details click here.