| Previous | Next |
| DNS_ERROR_INVALID_XML | DNS_ERROR_ROLLOVER_NOT_POKEABLE |
DNS_ERROR_NO_VALID_TRUST_ANCHORS
DNS_ERROR_NO_VALID_TRUST_ANCHORS means the trust-anchor import completed without adding a usable anchor. Every supplied anchor was invalid, unsupported, expired, or did not have enough remaining validity.
Inspect each candidate anchor and its remaining validity rather than importing the same set repeatedly. A successful file read does not mean any contained key is suitable for establishing the intended DNSSEC trust.
What to check
- Verify the source, cryptographic algorithm, digest, and validity dates of the trust anchors.
- Check the system clock before treating valid anchors as expired.
- Obtain current trust-anchor information from the authoritative, trusted source instead of extending or editing expired values locally.
Get-DnsServerDnsSecZoneSetting -ZoneName "example.com"Microsoft: Validate DNSSEC responses
Looking for a different code? Search another status or error code.