DNS_ERROR_DNSSEC_IS_DISABLED - 9125 (0x23A5)
This operation could not be completed because the DNS server has been configured with DNSSEC features disabled. Enable DNSSEC on the DNS server.
Updated: Feb 21, 2026
Technical Meaning
The DNS_ERROR_DNSSEC_IS_DISABLED error code indicates that a DNS operation could not be completed because the DNS server has been configured without enabling Domain Name System Security Extensions (DNSSEC). This configuration prevents the server from performing operations that require DNSSEC validation.
Error Details
This error is specific to DNS-related operations and occurs when an attempt is made to perform actions that necessitate DNSSEC validation, such as validating the authenticity of DNS responses. The operation will fail if DNSSEC is disabled on the server side.
Usage Context
This error typically arises in scenarios where a client or another DNS server attempts to validate DNS data using DNSSEC but encounters a server that has not enabled this feature. It can occur during various operations, such as resolving domain names, validating DNS records, and performing recursive queries.
Developer Interpretation
When encountering this error, developers should ensure that the DNS server is properly configured with DNSSEC enabled. This configuration allows for secure validation of DNS data, which is crucial for preventing man-in-the-middle attacks and ensuring the integrity of DNS responses.
Related Errors
DNS_ERROR_NO_SUCH_DOMAINDNS_ERROR_BAD_NAMEDNS_ERROR_UNVERIFIED_NAME
FAQ
Q: What does this error mean?
A: This error indicates that a DNS operation could not be completed because the DNS server has been configured without enabling DNSSEC.
Q: How can I resolve this issue?
A: Ensure that the DNS server is properly configured with DNSSEC enabled. Enable DNSSEC on the DNS server to allow for secure validation of DNS data.
Summary
The DNS_ERROR_DNSSEC_IS_DISABLED error code signifies a configuration issue where DNSSEC features are disabled on the DNS server, preventing certain operations from being completed securely. Developers should ensure that DNSSEC is enabled to resolve this issue and maintain the integrity and security of DNS responses.