Windows error 9112 (DNS_ERROR_KSP_NOT

Status / error code:		Category:

Constant name:
Source:		Operating System:
Description: Windows DNS Server could not open the configured key storage provider for a DNSSEC signing key.

Previous	Next
DNS_ERROR_UNKNOWN_SIGNING_PARAMETER_VERSION	DNS_ERROR_TOO_MANY_SKDS

DNS_ERROR_KSP_NOT_ACCESSIBLE

DNS_ERROR_KSP_NOT_ACCESSIBLE means Windows DNS Server could not open the CNG Key Storage Provider that contains or serves the DNSSEC signing key.

Verify that the provider is installed, enabled, and reachable from the DNS Server host.
For HSM-backed providers, confirm service availability, device connectivity, and access permissions for the DNS service context.
Check whether the issue began after a reboot, provider update, certificate/key migration, or server role change.

Get-DnsServerSigningKey -ZoneName "example.com"