Hi, In the moment unbound-anchor(8) creates root,key file that contains new KSK trust anchor as ADDPEND state. Does it take 30 days to update new key’s state to VALID ? (If so, new Unbound installation after 11 Sep (30days to the KSK roll) fail to update trusted sets until KSK roll?) Regards, -- Daisuke Higashi