DS record points to old DNSKEY record
This alert notifies you that a Key Signing Key (KSK) rotation is in progress for the zone and the DS record handed out by a parent zone points to the old DNSKEY record. It means that DNSSEC cannot authenticate the DNS records because the key doesn't match.
You can set this alert to monitor multiple DNS zones.
To create this alert, you need to have the
ALERTS_DNSSECscope. For more information, contact your account administrator.
- Edge DNS
- New Alert - Up to 15 minutes since the detection of the condition.
- Alert Cleared - The condition is cleared for 20 to 35 minutes.
Follow the instructions from the Troubleshooting section on the alert's page.
Updated about 2 years ago