Root KSK Ceremonies

Ceremonies are usually conducted four times a year to perform operations using the Root Key Signing Key, and involving Trusted Community Representatives. In a typical ceremony, the KSK is used to sign a set of operational ZSKs that will be used for a three month period to sign the DNS root zone. Other operations that may occur during ceremonies include installing new cryptographic officers, replacing hardware, or generating or replacing a KSK.


Date Ceremony Agenda
2015-11-12 KSK Ceremony 23 Sign 2016Q1 ZSKs
2015-08-13 KSK Ceremony 22 Sign 2015Q4 ZSKs; HSM Replacement
2015-07-20 HSM Acceptance Testing HSM Acceptance Testing for KSK Ceremony 22
2015-04-09 KSK Ceremony 21 Sign 2015Q3 ZSKs; HSM Replacement
2015-03-19 HSM Acceptance Testing HSM Acceptance Testing for KSK Ceremony 21
2015-01-22 KSK Ceremony 20 Sign 2015Q2 ZSKs
2014-11-20 KSK Ceremony 19 Sign 2015Q1 ZSKs
2014-08-14 KSK Ceremony 18 Sign 2014Q4 ZSKs; CO Replacement
2014-04-17 KSK Ceremony 17 Sign 2014Q3 ZSKs
2014-02-13 KSK Ceremony 16 Sign 2014Q2 ZSKs
2013-10-24 KSK Ceremony 15 Sign 2014Q1 ZSKs
2013-08-07 KSK Ceremony 14 Sign 2013Q4 ZSKs
2013-05-02 KSK Ceremony 13 Sign 2013Q3 ZSKs; CO Replacement
2013-02-12 KSK Ceremony 12 Sign 2013Q2 ZSKs
2012-11-12 KSK Ceremony 11 Sign 2013Q1 ZSKs
2012-07-26 KSK Ceremony 10 Sign 2012Q4 ZSKs
2012-05-22 KSK Ceremony 9 Sign 2012Q3 ZSKs
2012-02-02 KSK Ceremony 8 Sign 2012Q2 ZSKs
2011-09-30 KSK Ceremony 7 Sign 2012Q1 ZSKs
2011-07-20 KSK Ceremony 6 Sign 2011Q4 ZSKs
2011-05-11 KSK Ceremony 5 Sign 2011Q3 ZSKs
2011-02-07 KSK Ceremony 4 Sign 2011Q2 ZSKs
2010-11-01 KSK Ceremony 3 Sign 2011Q1 ZSKs
2010-07-12 KSK Ceremony 2 Instantiate El Segundo KMF; Signed 2010Q4 ZSKs
2010-06-16 KSK Ceremony 1 Instantiate Culpeper KMF; Generate KSK; Sign 2010Q3 ZSKs