diff --git a/lib/bind9/check.c b/lib/bind9/check.c
index fb34ad6b28..a95675c157 100644
--- a/lib/bind9/check.c
+++ b/lib/bind9/check.c
@@ -3400,7 +3400,8 @@ check_viewconf(const cfg_obj_t *config, const cfg_obj_t *voptions,
 	if ((tflags & ROOT_KSK_2010) != 0 && (tflags & ROOT_KSK_2017) == 0) {
 		cfg_obj_log(keys, logctx, ISC_LOG_WARNING,
 			    "trusted-key for root from 2010 without updated "
-			    "trusted-key from 2017");
+			    "trusted-key from 2017: THIS WILL FAIL AFTER "
+			    "KEY ROLLOVER");
 	}
 
 	if ((tflags & DLV_KSK_KEY) != 0) {