diff --git a/doc/notes/notes-current.rst b/doc/notes/notes-current.rst
index 650f305f4a..9a50a99179 100644
--- a/doc/notes/notes-current.rst
+++ b/doc/notes/notes-current.rst
@@ -90,6 +90,11 @@ Feature Changes
 Bug Fixes
 ~~~~~~~~~
 
+- The code managing :rfc:`5011` trust anchors created an invalid
+  placeholder keydata record upon a refresh failure, which prevented the
+  database of managed keys from subsequently being read back. This has
+  been fixed. :gl:`#2686`
+
 - Signed, insecure delegation responses prepared by ``named`` either
   lacked the necessary NSEC records or contained duplicate NSEC records
   when both wildcard expansion and CNAME chaining were required to