| Previous | Next |
| DNS_ERROR_NOT_ALLOWED_ON_ACTIVE_SKD | DNS_ERROR_NOT_ALLOWED_ON_UNSIGNED_ZONE |
DNS_ERROR_ROLLOVER_ALREADY_QUEUED
DNS_ERROR_ROLLOVER_ALREADY_QUEUED means the key already has a pending rollover request. Queuing the same rollover again would not add a second independent transition.
Inspect the queued rollover and its scheduled state instead of submitting another request. If the transition is stuck, diagnose that existing lifecycle operation so duplicate administrative commands do not hide the original problem.
What to check
- Inspect the pending key state and the scheduled rollover time.
- Check whether the expected rollover appears delayed because of propagation, parent DS publication, or a Key Master issue.
- Correct the underlying schedule only after confirming the current operation is not still valid.
Get-DnsServerSigningKey -ZoneName "example.com"Microsoft: Sign DNS zones with DNSSEC
Looking for a different code? Search another status or error code.