| Previous | Next |
| DNS_ERROR_NOT_ENOUGH_SIGNING_KEY_DESCRIPTORS | DNS_ERROR_INVALID_KEY_SIZE |
DNS_ERROR_UNSUPPORTED_ALGORITHM
DNS_ERROR_UNSUPPORTED_ALGORITHM means the selected DNSSEC cryptographic algorithm is not supported by the DNS Server implementation or cannot be used in the requested signing configuration.
Identify the exact algorithm requested by the zone or imported signing configuration and compare it with the target DNS Server version. Select a supported DNSSEC algorithm instead of assuming every standards-defined algorithm is implemented locally.
What to check
- Verify the algorithm name and confirm that it is supported on the server version hosting the authoritative primary zone.
- Review existing KSK and ZSK algorithms to avoid an incompatible mixed configuration.
- Use a supported algorithm selected through DNS Server management tools instead of editing signing metadata directly.
Get-DnsServerSigningKey -ZoneName "example.com"Microsoft: Add-DnsServerSigningKey
Looking for a different code? Search another status or error code.