<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
<style type="text/css" style="display:none;"> P {margin-top:0;margin-bottom:0;} </style>
</head>
<body dir="ltr">
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);" class="elementToProof">
I appreciate your email. I thought that was the process but the older version of the ARM I was using (matches my version) didn't have that nice section. So I will need to be sure to look in the current document when scratching my head as someone is making
some nice additions and improvements to the documentation!</div>
<div id="appendonsend"></div>
<hr style="display:inline-block;width:98%" tabindex="-1">
<div id="divRplyFwdMsg" dir="ltr"><font face="Calibri, sans-serif" style="font-size:11pt" color="#000000"><b>From:</b> bind-users <bind-users-bounces@lists.isc.org> on behalf of Nick Tait via bind-users <bind-users@lists.isc.org><br>
<b>Sent:</b> Friday, September 29, 2023 5:01 PM<br>
<b>To:</b> bind-users@lists.isc.org <bind-users@lists.isc.org><br>
<b>Subject:</b> Re: KSAP - How to manually rollover keys documentation?</font>
<div> </div>
</div>
<div>On 28/09/23 10:02, Eddie Rowe wrote:<br>
<blockquote type="cite">I am using the nifty feature of the KASP in 9.16.23, but I cannot seem to locate documentation on how to manually rollover keys in case this is needed in the future. The documentation is excellent as far as discussing the steps involved
for the manual or semi-automatic but I am not seeing the steps and tools you would use to rollover manually when using the KASP feature. Am I overlooking another document or KB article on this topic?</blockquote>
<p>Hi Eddie.</p>
<p>I wonder if the information you're looking for is here: <a class="x_moz-txt-link-freetext" href="https://bind9.readthedocs.io/en/latest/chapter5.html#key-rollover">
https://bind9.readthedocs.io/en/latest/chapter5.html#key-rollover</a><br>
</p>
<p>Specifically the following sentence:</p>
<blockquote>
<p><i>To roll a key sooner than scheduled, or to roll a key that has an unlimited lifetime, use:
</i><a class="x_reference x_internal" href="https://bind9.readthedocs.io/en/latest/manpages.html#cmdoption-rndc-arg-dnssec"><code class="x_xref x_std x_std-option x_docutils x_literal x_notranslate"><span class="x_pre">rndc</span>
<span class="x_pre">dnssec</span> <span class="x_pre">-rollover</span> <span class="x_pre">
-key</span> <span class="x_pre">12345</span> <span class="x_pre">dnssec.example.</span></code></a><i>.</i></p>
</blockquote>
<p>Nick.</p>
<p></p>
</div>
</body>
</html>