| Previous | Next |
| DNS_ERROR_NOT_ALLOWED_ON_ACTIVE_SKD | DNS_ERROR_NOT_ALLOWED_ON_UNSIGNED_ZONE |
DNS_ERROR_ROLLOVER_ALREADY_QUEUED
DNS_ERROR_ROLLOVER_ALREADY_QUEUED means the key already has a pending rollover request. Queuing the same rollover again would not add a second independent transition.
What to check
- Inspect the pending key state and the scheduled rollover time.
- Check whether the expected rollover appears delayed because of propagation, parent DS publication, or a Key Master issue.
- Correct the underlying schedule only after confirming the current operation is not still valid.
Get-DnsServerSigningKey -ZoneName "example.com"Microsoft: Sign DNS zones with DNSSEC
Microsoft: Get-DnsServerDnsSecZoneSetting
Looking for a different code? Search another status or error code.