Windows error 9126 (DNS_ERROR_INVALID_XML): meaning and diagnosis

Status / error code:		Category:

Constant name:
Source:		Operating System:
Description: The DNSSEC operation received an empty or syntactically invalid XML document.

Previous	Next
DNS_ERROR_DNSSEC_IS_DISABLED	DNS_ERROR_NO_VALID_TRUST_ANCHORS

DNS_ERROR_INVALID_XML

DNS_ERROR_INVALID_XML means a DNSSEC-related operation received XML that is empty or syntactically invalid. The error is commonly about imported configuration, trust-anchor data, or a management interface payload rather than the zone records themselves.

What to check

Identify the XML source and retain the original file or response for validation.
Check encoding, truncation, escaping, and whether the payload belongs to the correct zone or signing workflow.
Recreate the configuration through supported DNS Server cmdlets rather than hand-editing serialized metadata.

Get-DnsServerDnsSecZoneSetting -ZoneName "example.com" -SigningMetaData

Microsoft: Get-DnsServerDnsSecZoneSetting

Microsoft: Test-DnsServerDnsSecZoneSetting

Microsoft: Sign DNS zones with DNSSEC

Looking for a different code? Search another status or error code.