What does Windows error code 9115 (DNS_ERROR_INVALID_INITIAL_ROLLOVER_OFFSET) mean?

 
Previous Next
DNS_ERROR_INVALID_ROLLOVER_PERIOD DNS_ERROR_ROLLOVER_IN_PROGRESS

DNS_ERROR_INVALID_INITIAL_ROLLOVER_OFFSET

DNS_ERROR_INVALID_INITIAL_ROLLOVER_OFFSET means the requested delay before the first key rollover is not valid for the configured signing schedule.

What to check for DNS_ERROR_INVALID_INITIAL_ROLLOVER_OFFSET

  • Check the configured rollover period and the initial offset as one schedule, not as unrelated parameters.
  • Make sure the first rollover is not scheduled before keys, signatures, and parent delegation data can propagate.
  • Validate the settings before committing them to a production signed zone.
Test-DnsServerDnsSecZoneSetting -ZoneName "example.com"

Microsoft: Sign DNS zones with DNSSEC

Microsoft: Test-DnsServerDnsSecZoneSetting

Microsoft: Get-DnsServerDnsSecZoneSetting

Where the result is returned

This result is Win32 system error 9115 (0x0000239B) from winerror.h. AllStat describes it as “The specified initial rollover offset is invalid.”. The code is useful only together with the API that failed, because multiple Windows components can reuse system-error values while imposing different retry and cleanup rules.

Diagnostic sequence

  • Call GetLastError immediately after the failing API and save this result, the function name, all relevant flags, and the target path, handle, service, device, account, or policy object.
  • Capture the component log that owns the dns / initial / rollover / offset operation and retain the original numeric value before a framework converts it to an HRESULT or exception.
  • compare preconditions with the API documentation and reproduce with a minimal request before changing system-wide configuration.

Retry this result only after the resource or state named in “The specified initial rollover offset is invalid.” has changed. For invalid parameters, unsupported formats, missing objects, policy restrictions, and access failures, correct the input or configuration instead of immediately repeating the same call.

Looking for a different code? Search another status or error code.