- Login to UltraDNS
- Click Domains
- Select the [domain] to perform the KSK Rollover
- Click DNSSEC
- Press the ROLLOVER button
- UltraDNS generates a new key and provides DS records to customer
- Provide the updated DS records to the registrar
- Have them replace the current DS records with the new DS records
- There is NO DOWNTIME when they replace the records because we have signed the zone via both keys
- Once those are added and propagated globally, UltraDNS will automatically detect the changes and remove the old keys from the system
- No further action is required