Hi Thomas,
if you are familiar with Knot's automated (KSK) roll-overs, then
algorithm roll-over won't be much different, it just has more steps.
The KSK submission to the parent zone is involved, as is with the KSK
roll-over.
To be 100% sure about it, you are encouraged to try on some non-public
(clone, playground) server first.
I would recommend to trigger an algorithm roll-over with the zone being
in some normal state, i.e. just one KSK+ZSK pair.
Cheers,
Libor
Dne 05.11.20 v 23:20 Thomas napsal(a):
Hi,
the doc says that changing the policy algorithm field will trigger an
algorithm rollover. Is there anything else one must consider or is the
algorithm rollover done fully automated like the normal rollovers?
Thanks,
Thomas
--
https://lists.nic.cz/mailman/listinfo/knot-dns-users
