diff --git a/doc/arm/notes.xml b/doc/arm/notes.xml
index b09f86ef47..01985fffde 100644
--- a/doc/arm/notes.xml
+++ b/doc/arm/notes.xml
@@ -40,34 +40,6 @@
- New DNSSEC Root Key
-
- ICANN is in the process of introducing a new Key Signing Key (KSK) for
- the global root zone. BIND has multiple methods for managing DNSSEC
- trust anchors, with somewhat different behaviors. If the root
- key is configured using the managed-keys
- statement, or if the pre-configured root key is enabled by using
- dnssec-validation auto, then BIND can keep keys up
- to date automatically. Servers configured in this way should have
- begun the process of rolling to the new key when it was published in
- the root zone in July 2017. However, keys configured using the
- trusted-keys statement are not automatically
- maintained. If your server is performing DNSSEC validation and is
- configured using trusted-keys, you are advised to
- change your configuration before the root zone begins signing with
- the new KSK. This is currently scheduled for October 11, 2017.
-
-
- This release includes an updated version of the
- bind.keys file containing the new root
- key. This file can also be downloaded from
-
- https://www.isc.org/bind-keys
- .
-
-
-
Legacy Windows No Longer Supported
As of BIND 9.9.11, Windows XP and Windows 2003 are no longer supported
@@ -289,8 +261,10 @@
End of Life
BIND 9.9 (Extended Support Version) will be supported until
- at least June, 2018.
- https://www.isc.org/downloads/software-support-policy/
+ June, 2018, at which time one final maintenance release will be
+ published for the branch. The new Extended Support Version is BIND
+ 9.11, which will be supported until at least December, 2021.
+ See https://www.isc.org/downloads/software-support-policy/ for details of ISC's software support policy.