| Previous | Next |
| DNS_ERROR_RCODE_BADSIG | DNS_ERROR_RCODE_BADTIME |
DNS_ERROR_RCODE_BADKEY
DNS_ERROR_RCODE_BADKEY means the DNS server rejected the authentication key associated with the signed request. The key can be absent, expired, selected under the wrong name, or inconsistent between the two endpoints.
What to check
- Identify the key name and algorithm expected by the server for the operation.
- Compare the configured key material on both sides and make sure an intended rollover did not leave one endpoint on an old key.
- Check permissions for the account or service that reads protected key material.
If signing is automated, verify rollover timestamps and confirm that both endpoints have converged on the same active key.
Microsoft: DNS system error codes
Looking for a different code? Search another status or error code.