| Previous | Next |
| DNS_ERROR_RCODE_NOTZONE | DNS_ERROR_RCODE_BADKEY |
DNS_ERROR_RCODE_BADSIG
DNS_ERROR_RCODE_BADSIG means the DNS message signature could not be verified. It can affect signed dynamic updates, transfers, or other authenticated DNS exchanges. Investigate the key material and request path; do not disable signature validation merely to make the operation succeed.
What to check
- Check which signing mechanism and key identity the client and server expected for the failing request.
- Verify that both endpoints use matching active keys and that no middlebox is changing the signed DNS message.
- Correlate the failure with DNS diagnostic events and the server clock.
Microsoft: DNS system error codes
Microsoft: DNS logging and diagnostics
Microsoft: DnsServer PowerShell module
Microsoft: Dynamic DNS Update in Windows and Windows Server
Looking for a different code? Search another status or error code.