---
id: "key-rollover"
kind: "glossary-term"
title: "密钥轮转"
language: "zh-Hans"
category: "DNS与技术基础"
updated: "2026-10-10T12:00:00Z"
canonical: "https://tldlog.com/zh/cihui/miyao-lunzhuan/"
translations:
  en: "https://tldlog.com/glossary/key-rollover/"
  es: "https://tldlog.com/es/glosario/traspaso-clave/"
  de: "https://tldlog.com/de/glossar/key-rollover/"
  fr: "https://tldlog.com/fr/glossaire/roulement-cle/"
  it: "https://tldlog.com/it/glossario/rollover-chiave/"
  pt-BR: "https://tldlog.com/pt/glossario/substituicao-chave/"
  ru: "https://tldlog.com/ru/glossariy/smena-klyucha/"
---

# 密钥轮转

按计划用新密钥替换DNSSEC密钥的过程。更换分谨慎的步骤进行，确保解析器始终有可用于验证签名的密钥。一旦出错，域名可能无法访问。更换根区密钥是罕见且备受关注的事件。

## 相关术语

- [KSK](https://tldlog.com/zh/cihui/ksk/)
- [ZSK](https://tldlog.com/zh/cihui/zsk/)
- [信任锚](https://tldlog.com/zh/cihui/xinren-mao/)
- [DS记录](https://tldlog.com/zh/cihui/ds-jilu/)
- [CDS和CDNSKEY](https://tldlog.com/zh/cihui/cds-cdnskey/)