Search Engine: Elastic

Article ID: 133278, created on Oct 11, 2018, last review on Oct 11, 2018

  • Applies to:
  • Operations Automation 7.4

Question

ICANN is going to change the DNSSEC root key.

https://access.redhat.com/solutions/3060331

Which actions should be performed to apply changes on the OA-managed Nameservers?

Answer

PowerDNS 3.4 does not support DNSSEC, so it is not affected and no actions required.

For the BIND service, the fix will be delivered with the new package version. Make sure the bind package is updated to the latest version available (v9.9.4 or higher):

# yum update bind

The key can be verified in /etc/named.root.key file.

5356b422f65bdad1c3e9edca5d74a1ae caea8340e2d186a540518d08602aa065 e12cea1d47a3125d335d68e6d4e15e07 55fe109b4b4fe3fbb893f22dbb85a41a 1941880841f714e458ae4dc3d9f3062d

Email subscription for changes to this article
Save as PDF