| Previous | Next |
| DNS_ERROR_RCODE_BADSIG | DNS_ERROR_RCODE_BADTIME |
DNS_ERROR_RCODE_BADKEY
DNS_ERROR_RCODE_BADKEY means the DNS server rejected the authentication key associated with the signed request. The key can be absent, expired, selected under the wrong name, or inconsistent between the two endpoints.
What to check
- Identify the key name and algorithm expected by the server for the operation.
- Compare the configured key material on both sides and make sure an intended rollover did not leave one endpoint on an old key.
- Check permissions for the account or service that reads protected key material.
Microsoft: DNS system error codes
Microsoft: DNS logging and diagnostics
Microsoft: DnsServer PowerShell module
Microsoft: DnsServer PowerShell module
Looking for a different code? Search another status or error code.