Root KSK Ceremony 48

This DNSSEC key signing ceremony is planned for

Location Root Zone Key Management Facility West
El Segundo, California, USA
Ceremony Start 2023-02-01 21:00:00 UTC
Wednesday 1 February 2023, 1 p.m. (local time at facility)
Objectives Sign the ZSK for 2023Q2
Replace Cryptographic Officer 2 (West)
Reissue Crypto Officer Credentials
Introduce Hardware Security Module 7W

Observing the ceremony

The key signing ceremony is a public event, and you are welcome to observe. Due to space constraints, only a small number of persons are able to participate as observers at a ceremony in person. We also broadcast ceremonies as they happen, and will provide recordings after the ceremony is concluded. Prior to observing a ceremony, we recommend you review the ceremony materials (i.e. the draft script) in advance.

In Person If you wish to attend as an observer in person, this must be arranged in advance. Priority is given to those that have a formal role in the ceremony, and then on a first-come first-served basis. This ceremony will be held in El Segundo, California, USA, and observers must meet all costs in travelling to the ceremony. Requests should be submitted at least 45 days before the ceremony (i.e. by 18 December 2022)
More information on attending in person
Online The ceremony will be broadcast online during the event.
Afterwards Footage and materials from the ceremony will be posted on this website after the completion of a ceremony.


This timeline is a rough guide only. We endeavour to adhere to the advertised start time, but the length of ceremonies varies. Note that the following day is held as a backup date in case the ceremony can not be conducted as scheduled.

Time (UTC) Time (Ceremony) Agenda
21:00 1 p.m. – 6 p.m. Ceremony

Ceremony Materials

File Description
KC48_Script.pdf (303.0 KB) Proposed Key Signing Key Ceremony Script
coen-0.4.0-amd64.iso (238.3 MB) Signing Computer Operating System Image Release coen-0.4.0
coen-0.4.0-amd64.iso.sha256 (87 bytes) Signing Computer Operating System Image Release coen-0.4.0 SHA-256 Hash