| Previous | Next |
| DNS_ERROR_UNEXPECTED_DATA_PROTECTION_ERROR | DNS_ERROR_UNKNOWN_SIGNING_PARAMETER_VERSION |
DNS_ERROR_UNEXPECTED_CNG_ERROR
DNS_ERROR_UNEXPECTED_CNG_ERROR means an unexpected Windows Cryptography Next Generation (CNG) error occurred while Windows DNS Server was working with DNSSEC signing keys.
Correlate the DNS event with CNG, KSP, hardware security module, and system events from the same time. Preserve the lower-level cryptographic status because this DNS code alone does not identify which provider operation failed.
What to check
- Correlate the DNS Server error with CNG, certificate, KSP, and hardware security module events if an HSM is used.
- Determine whether the error is tied to one algorithm or one provider by comparing the affected key with working keys.
- Validate the DNSSEC configuration after resolving the underlying cryptographic issue.
Test-DnsServerDnsSecZoneSetting -ZoneName "example.com"Microsoft: Test-DnsServerDnsSecZoneSetting
Looking for a different code? Search another status or error code.