| Previous | Next |
| DNS_ERROR_NOT_ENOUGH_SIGNING_KEY_DESCRIPTORS | DNS_ERROR_INVALID_KEY_SIZE |
DNS_ERROR_UNSUPPORTED_ALGORITHM
DNS_ERROR_UNSUPPORTED_ALGORITHM means the selected DNSSEC cryptographic algorithm is not supported by the DNS Server implementation or cannot be used in the requested signing configuration.
What to check
- Verify the algorithm name and confirm that it is supported on the server version hosting the authoritative primary zone.
- Review existing KSK and ZSK algorithms to avoid an incompatible mixed configuration.
- Use a supported algorithm selected through DNS Server management tools instead of editing signing metadata directly.
Get-DnsServerSigningKey -ZoneName "example.com"Microsoft: Add-DnsServerSigningKey
Microsoft: Sign DNS zones with DNSSEC
Microsoft: Test-DnsServerDnsSecZoneSetting
Looking for a different code? Search another status or error code.