| Previous | Next |
| DNS_ERROR_KSP_DOES_NOT_SUPPORT_PROTECTION | DNS_ERROR_UNEXPECTED_CNG_ERROR |
DNS_ERROR_UNEXPECTED_DATA_PROTECTION_ERROR
DNS_ERROR_UNEXPECTED_DATA_PROTECTION_ERROR means Windows DNS Server encountered an unexpected data-protection error while accessing DNSSEC signing information. The immediate DNSSEC operation cannot be trusted to continue.
Check the security context and protection mechanism used for stored signing material, then look for the lower-level Windows protection error. Avoid regenerating DNSSEC keys until you know whether the existing protected data is still recoverable.
What to check
- Review the DNS Server and CNG-related events at the same timestamp for a lower-level provider or protection error.
- Check whether the failure affects every signed zone or only one key set.
- Avoid recreating keys immediately: first determine whether the existing key material can be restored and whether a rollover is already active.
Test-DnsServerDnsSecZoneSetting -ZoneName "example.com"Microsoft: Test-DnsServerDnsSecZoneSetting
Looking for a different code? Search another status or error code.