| Previous | Next |
| DNS_ERROR_INVALID_XML | DNS_ERROR_ROLLOVER_NOT_POKEABLE |
DNS_ERROR_NO_VALID_TRUST_ANCHORS
DNS_ERROR_NO_VALID_TRUST_ANCHORS means the trust-anchor import completed without adding a usable anchor. Every supplied anchor was invalid, unsupported, expired, or did not have enough remaining validity.
What to check
- Verify the source, cryptographic algorithm, digest, and validity dates of the trust anchors.
- Check the system clock before treating valid anchors as expired.
- Obtain current trust-anchor information from the authoritative, trusted source instead of extending or editing expired values locally.
Get-DnsServerDnsSecZoneSetting -ZoneName "example.com"Microsoft: Validate DNSSEC responses
Microsoft: Sign DNS zones with DNSSEC
Microsoft: Get-DnsServerDnsSecZoneSetting
Looking for a different code? Search another status or error code.