[ksk-rollover] new KSK in the DNS

[Yasuhiro Orange Morishita / 森下泰宏]

Hi folks,

Thank you for replies. I understand the current situation.

> We undertook an exercise to identify an alternative HSM
> manufacturer, and it is planned the next Root Zone KSK will be
> generated on this new hardware in April.

-- 
Yasuhiro 'Orange' Morishita <yasuhiro at jprs.co.jp>

From: James Mitchell via ksk-rollover <ksk-rollover at icann.org>
Subject: Re: [ksk-rollover] new KSK in the DNS
Date: Fri, 9 Feb 2024 06:32:34 +0000

> We will be moving to the Thales Luna USB G7 HSMs. Information regarding its selection and the impact on policies and procedures will be published in the coming weeks. I'll share the announcement on this list once published.
> 
> Thales as a reputable and established vendor whose products we expect to see supported long term. I anticipate the procedures coming out of this change will form a baseline response should we need to change HSM vendors again.
> 
> Thanks,
> James
> 
> On 2/8/24, 3:13 PM, "ksk-rollover on behalf of Michael Richardson via ksk-rollover" <ksk-rollover-bounces at icann.org <mailto:ksk-rollover-bounces at icann.org> on behalf of ksk-rollover at icann.org <mailto:ksk-rollover at icann.org>> wrote:
> 
> 
> 
> 
> Michael StJohns via ksk-rollover <ksk-rollover at icann.org <mailto:ksk-rollover at icann.org>> wrote:
>> Just for curiosity, what's the new HSM platform?
> 
> 
> same question, and... how do we/you know it won't happen again?
> 
> 
> --
> Michael Richardson <mcr+IETF at sandelman.ca <mailto:mcr+IETF at sandelman.ca>> . o O ( IPv6 IøT consulting )
> Sandelman Software Works Inc, Ottawa and Worldwide
> 
> 
> 
> 
> 
> 
> 
> 
> 
> 
> 
> _______________________________________________
> ksk-rollover mailing list
> ksk-rollover at icann.org
> https://mm.icann.org/mailman/listinfo/ksk-rollover
> 
> _______________________________________________
> By submitting your personal data, you consent to the processing of your personal data for purposes of subscribing to this mailing list accordance with the ICANN Privacy Policy (https://www.icann.org/privacy/policy) and the website Terms of Service (https://www.icann.org/privacy/tos). You can visit the Mailman link above to change your membership status or configuration, including unsubscribing, setting digest-style delivery or disabling delivery altogether (e.g., for a vacation), and so on.
>