| Previous | Next |
| DNS_ERROR_RCODE_BADKEY | DNS_ERROR_KEYMASTER_REQUIRED |
DNS_ERROR_RCODE_BADTIME
DNS_ERROR_RCODE_BADTIME means the signature validity time on the DNS request was unacceptable. Clock skew, a stale signed request, or a signing-window mismatch can cause it.
Compare the clocks of the systems creating and validating the signed request and inspect its validity window. Correct time synchronization or stale signing state before changing keys, because valid cryptography still fails outside the accepted time range.
What to check
- Verify time synchronization on the DNS server and on the system submitting the signed request.
- Check whether the request was delayed or replayed beyond the configured signing tolerance.
- After correcting time and key state, generate a new request instead of replaying the failed message.
Microsoft: DNS system error codes
Looking for a different code? Search another status or error code.