ICANN is a global multistakeholder organization that manages internet resources for the public benefit. It coordinates the domain name system to ensure a secure and stable internet. The document discusses an upcoming key signing key rollover by ICANN that will impact system operators and requires them to update their trust anchors. It also describes the APAC Space, a forum for the Asia Pacific community to discuss internet governance issues, and an upcoming meeting at ICANN58.

1. ICANN Update
Joyce Chen
GSE Strategy & Development Senior Manager
26 February 2017

2. | 2
What is ICANN?
The Internet Corporation for Assigned Names and
Numbers (ICANN) is a global multistakeholder, private
sector-led organization that manages Internet resources for
the public benefit
• ICANN's mission overall is to coordinate the global Internet's
systems of unique identifiers, and in particular to ensure the stable
and secure operation of those unique identifier systems

3. | 3
What is ICANN?
GLOBAL COMMUNITY:
• Participants from all over the world are
dedicated to keeping the Internet secure,
stable, and interoperable
MULTISTAKEHOLDER:
• Bottom-up consensus policy
processes
• Any stakeholder with an interest in
the Domain Name System can
have a voice directly heard in
decision making

4. | 4
ICANN57 Hyderabad, India – 3-9 November 2016
APAC Space in Hyderabad, November 2016
Record attendance: 3,141
participants
Strong APAC presence: 1,400 locals
Largest APAC Space meeting

5. | 5
What is APAC Space?
“Space” for APAC Community Members
• Bi-monthly, web-conference or face-to-face at ICANN meetings
• Raise issues, share views, coordinate activities
• “Practice Ground” to facilitate community to contribute to ICANN work
How is it conducted?
• Discussions are community-led,
community-moderated
• Agenda determined based on
consultation

6. | 6
Survey 2017
http://tinyurl.com/apac-space-survey-2017
Let us know what YOU are interested to discuss in APAC
Space!
Survey Period: 16 February 2017 – 8 March 2017

7. | 7
Contributing to a Secure, Stable, and Resilient Internet in 2016
DNSSEC Deployment
Ø Singapore (.SG)
Ø Vietnam (.VN)
L-Root Deployment
Ø Myanmar – Yangon &
Mandalay
Ø Federated States of
Micronesia
Capacity
Building
Domain Name
System Security
Extensions
(DNSSEC)
Workshop,
Phnom Penh in
Dec 2016

8. | 8https://meetings.icann.org/en/copenhagen58
APAC Space
Wednesday, 15 March 2017
08:30AM – 10:30AM (local time)
Key Highlights:
• Continuation of discussion on
New gTLD Subsequent
Procedures PDP
• Meet Registries Stakeholder
Group (RySG) during the
provided breakfast
• Any other topics for general
discussion

9. | 9
Key Signing Key (KSK) Rollover
¤ Update your system with the public part of the new KSK (the root
“trust anchor”)
o Available from https://www.iana.org/dnssec/files
¤ Key dates of the process when end users may experience
interruption in Internet services:
o 19 September, 2017
Size increase for DNSKEY response from root name servers
o 11 October, 2017 – Most important date
New KSK used for signing for the first time
o 11 January, 2018
The old KSK is revoked

10. | 10
DNS Software
Developers &
Distributors
Network
Operators
Root Server
Operators
Internet
Service
Providers
Who Will Be Impacted?
System
Integrators
End
Users
(if no action taken by
resolver operators)

11. | 11
Key Signing Key (KSK) Rollover
• DNSSEC Validations - 15% worldwide
• If the trust anchor is "misconfigured" (i.e., the wrong
key) DNSSEC will reject legitimate responses
– “the Internet is down”

12. | 12
What You Need to Do
• Manage Your Trust Anchors
– Be aware of your software tools for managing
trust anchors
– Be aware of the new KSK
• When Events Happen
– Keep an eye on dates
– Be mindful of when changes are scheduled and
monitor appropriately

13. | 13
The KSK Roll Plan Documents
• The plan consists of five documents
– 2017 KSK Roll Operational Implementation Plan
– 2017 KSK Roll Systems Test Plan
– 2017 KSK Roll Monitoring Plan
– 2017 KSK Roll External Test Plan
– 2017 KSK Roll Back Out Plan
• The documents are available at
https://www.icann.org/kskroll

14. | 14
¤ Join the ksk-rollover@icann.org
mailing list:
o https://mm.icann.org/listinfo/ksk-rollover
¤ Follow on Twitter
o @ICANN
o Hashtag: #KeyRoll
¤ Visit the web page:
o https://www.icann.org/kskroll
For More Information

15. | 15
Thank You and Questions
Email: joyce.chen@icann.org / apachub@icann.org
icann.org
gplus.to/icann
weibo.com/ICANNorg
flickr.com/photos/icann
slideshare.net/icannpresentations
twitter.com/icann
twitter.com/icann4biz
facebook.com/icannorg
linkedin.com/company/icann
youtube.com/user/icannnews
Thank you and Questions