| Previous | Next |
| DNS_ERROR_UNKNOWN_SIGNING_PARAMETER_VERSION | DNS_ERROR_TOO_MANY_SKDS |
DNS_ERROR_KSP_NOT_ACCESSIBLE
DNS_ERROR_KSP_NOT_ACCESSIBLE means Windows DNS Server could not open the CNG Key Storage Provider that contains or serves the DNSSEC signing key.
Test provider access in the security context used by the DNS Server service and inspect CNG/KSP events. A key can exist on the machine yet remain unusable because the provider, hardware device, or permissions are unavailable.
What to check
- Verify that the provider is installed, enabled, and reachable from the DNS Server host.
- For HSM-backed providers, confirm service availability, device connectivity, and access permissions for the DNS service context.
- Check whether the issue began after a reboot, provider update, certificate/key migration, or server role change.
Get-DnsServerSigningKey -ZoneName "example.com"Looking for a different code? Search another status or error code.