ICANN will change the root zone key signing key (KSK) on 11 Oct 2017. Any network operators and concerned parties who have enabled DNSSEC should get the systems updated with the new KSK enabled by the due date. For details please refer to the Quick Guide or ICANN’s related website