| Previous | Next |
| DNS_ERROR_INVALID_KEY_SIZE | DNS_ERROR_KSP_DOES_NOT_SUPPORT_PROTECTION |
DNS_ERROR_SIGNING_KEY_NOT_ACCESSIBLE
DNS_ERROR_SIGNING_KEY_NOT_ACCESSIBLE means the DNS Server cannot access one or more signing keys required by the zone. Zone signing cannot operate reliably until the key-access failure is resolved.
What to check
- Identify the affected key and determine whether it is missing, disabled, stored in an unavailable provider, or blocked by permissions.
- Check the DNS Server event log and the service account context used to access the key material.
- Do not delete an inaccessible key until you have confirmed its status in the rollover plan and the impact on DNSSEC validation.
Get-DnsServerSigningKey -ZoneName "example.com"Microsoft: Add-DnsServerSigningKey
Microsoft: Test-DnsServerDnsSecZoneSetting
Looking for a different code? Search another status or error code.