How do i fix this? "EDE=9 (DNSKEY Missing): (validation failure : No DNSKEY record from 150.171.21.3 for key domain.com. while building chain of trust)]"

Question

Hello,

We have a domain in Azure DNS and its connected to a Microsoft 365 tenant

Noticed that it wont recieve emails and when i checked Message trace from the sending server it says its delayed becuase of this:

Reason: [{LED=450 4.4.312 DNS query failed [Message=ServerFailure] [LastAttemptedServerName=domain.com] [EDE=9 (DNSKEY Missing): (validation failure : No DNSKEY record from 150.171.21.3 for key domain.com. while building chain of trust)] [GV2PEPF00000017.SWEP280.PROD.OUTLOOK.COM 2023-12-. OutboundProxyTargetHostName: domain.com

How do i fix this? it has been working just fine until now.

Accepted Answer

@Martin Petersson

Thank you for reaching out.

Based on your reply above, did turning off the DNSSEC on your domain registrar help in resolving the issue?

Since we did not hear back from you. I am just posting this as answer for anyone in the community facing similar issue. Please feel free to add any details if I have missed any.

The error received EDE=9 (DNSKEY Missing) as documented here and as correctly guessed above means this domain did not pass DNSSEC validation. Since Azure DNS currently does not support DNSSEC as documented here the DNSSEC on the registrar should be turned off.

The DNSSEC feature is tracked in the Azure DNS backlog. Use the feedback site to register your support for this feature.

Hope this helps! Please let me know if you have any additional questions. Thank you!

Please "Accept the answer" if the information helped you. This will help us and others in the community as well.

Share via

How do i fix this? "EDE=9 (DNSKEY Missing): (validation failure <domain.com MX IN>: No DNSKEY record from 150.171.21.3 for key domain.com. while building chain of trust)]"

0 additional answers