<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
<style>
<!--
@font-face
        {font-family:"Cambria Math"}
@font-face
        {font-family:Calibri}
@font-face
        {font-family:"Myriad Pro"}
p.MsoNormal, li.MsoNormal, div.MsoNormal
        {margin:0in;
        margin-bottom:.0001pt;
        font-size:11.0pt;
        font-family:"Calibri",sans-serif}
a:link, span.MsoHyperlink
        {color:#0563C1;
        text-decoration:underline}
a:visited, span.MsoHyperlinkFollowed
        {color:#954F72;
        text-decoration:underline}
span.EmailStyle17
        {font-family:"Calibri",sans-serif;
        color:windowtext}
.MsoChpDefault
        {font-family:"Calibri",sans-serif}
@page WordSection1
        {margin:1.0in 1.0in 1.0in 1.0in}
div.WordSection1
        {}
-->
</style>
</head>
<body lang="EN-US" link="#0563C1" vlink="#954F72">
<div style="font-family:Calibri,Arial,Helvetica,sans-serif; font-size:12.0pt; line-height:1.3; color:#1F497D">
<div>As I personally understand it you can ignore this notice if:<br>
<br>
a) you are not enforcing DNSSEC validation<br>
b) if you are running a version of BIND that supports automatic KSK updates.<br>
<br>
John<br>
</div>
<div><br>
</div>
<div id="signature-x" class="signature_editor" style="font-family:Calibri,Arial,Helvetica,sans-serif; font-size:12.0pt; color:#1F497D">
Sent from <a href="http://www.9folders.com/" style="text-decoration:none; color:#009BDF">
Nine</a><br>
</div>
</div>
<div id="quoted_header" style="clear:both">
<hr style="border:none; height:1px; color:#E1E1E1; background-color:#E1E1E1">
<div style="border:none; padding:3.0pt 0cm 0cm 0cm"><span style="font-size:11.0pt; font-family:'Calibri','sans-serif'"><b>From:</b> Brent Swingle <brent@havilandtelco.com><br>
<b>Sent:</b> Thursday, September 6, 2018 12:36 PM<br>
<b>To:</b> bind-users@lists.isc.org<br>
<b>Subject:</b> KSK Rollover<br>
</span></div>
</div>
<br type="attribution">
<div>
<div class="WordSection1">
<p class="MsoNormal"><span style="color:#1F497D">I recently received an email indicating that our DNS servers are not properly equipped for the planned KSK Rollover that is coming.  It leads off with this line “</span>On 11 October 2018, ICANN will change or
 "roll over" the DNSSEC key signing key (KSK) of the DNS root zone.<span style="color:#1F4E79">”</span><span style="color:#1F497D"></span></p>
<p class="MsoNormal"><span style="color:#1F497D"> </span></p>
<p class="MsoNormal"><span style="color:#1F497D">Reading through the email there are links on how to check our server setup and make adjustments.  My specific question to the group is in regards to one of the steps outlined for checking the current configuration.</span></p>
<p class="MsoNormal"><span style="color:#1F497D"> </span></p>
<p class="MsoNormal"><span style="color:#1F497D">This is the link that outlines the server test steps:</span></p>
<p class="MsoNormal"><span style="color:#1F497D"><a href="https://www.icann.org/dns-resolvers-checking-current-trust-anchors">https://www.icann.org/dns-resolvers-checking-current-trust-anchors</a></span></p>
<p class="MsoNormal"><span style="color:#1F497D"> </span></p>
<p class="MsoNormal"><span style="color:#1F497D">This is the command that does not work and the output received:</span></p>
<p class="MsoNormal"><span style="font-family:"Myriad Pro"; color:#1F497D">[root@ns2 ~]# rndc secroots</span></p>
<p class="MsoNormal"><span style="font-family:"Myriad Pro"; color:#1F497D">rndc: 'secroots' failed: permission denied</span></p>
<p class="MsoNormal"><span style="font-family:"Myriad Pro"; color:#1F497D">[root@ns2 ~]#</span></p>
<p class="MsoNormal"><span style="font-family:"Myriad Pro"; color:#1F497D"> </span></p>
<p class="MsoNormal"><span style="font-family:"Myriad Pro"; color:#1F497D">This are the versions that I am running:</span></p>
<p class="MsoNormal"><span style="font-family:"Myriad Pro"; color:#1F497D">[root@ns2 ~]# named -v</span></p>
<p class="MsoNormal"><span style="font-family:"Myriad Pro"; color:#1F497D">BIND 9.10.2-P4-RedHat-9.10.2-5.P4.fc22</span></p>
<p class="MsoNormal"> </p>
<p class="MsoNormal"> </p>
<p class="MsoNormal"><span style="color:#1F4E79">Might anyone be able to tell me what adjustment I would need to make in order for this command to work properly so I can look at the output file and verify my config?</span></p>
<p class="MsoNormal"><span style="color:#1F4E79"> </span></p>
<p class="MsoNormal"><span style="color:#1F4E79">Thanks,</span></p>
</div>
</div>
</body>
</html>