ICANN is going to change the DNSSEC root key.
Which actions should be performed to apply changes on the OA-managed Nameservers?
PowerDNS 3.4 does not support DNSSEC, so it is not affected and no actions required.
For the BIND service, the fix will be delivered with the new package version.
Make sure the
bind package is updated to the latest version available (v9.9.4 or higher):
# yum update bind
The key can be verified in