Search Engine: Elastic

Article ID: 133278, created on Oct 11, 2018, last review on Oct 11, 2018

  • Applies to:
  • Operations Automation 7.4

Question

ICANN is going to change the DNSSEC root key.

https://access.redhat.com/solutions/3060331

Which actions should be performed to apply changes on the OA-managed Nameservers?

Answer

PowerDNS 3.4 does not support DNSSEC, so it is not affected and no actions required.

For the BIND service, the fix will be delivered with the new package version. Make sure the bind package is updated to the latest version available (v9.9.4 or higher):

# yum update bind

The key can be verified in /etc/named.root.key file.

5356b422f65bdad1c3e9edca5d74a1ae 8fc71f07abe5b233fea1ae0377cd5e3d 55fe109b4b4fe3fbb893f22dbb85a41a 1941880841f714e458ae4dc3d9f3062d

Email subscription for changes to this article
Save as PDF