DNS_ERROR_NSEC3_INCOMPATIBLE_WITH_RSA_SHA1 0x8007238F

Error code 9103 · HRESULT 0x8007238F

WINDOWS

NSEC3 is not compatible with the RSA-SHA-1 algorithm. Choose a different algorithm or use NSEC.

Windows troubleshooting diagram: Device Manager warning and a system file scan
Windows errors: check drivers, system files and Event Viewer, in that order.

What it means

DNS_ERROR_NSEC3_INCOMPATIBLE_WITH_RSA_SHA1 is a Windows error code (system error 9103, returned as HRESULT 0x8007238F) reported by Windows. Its official message is: “NSEC3 is not compatible with the RSA-SHA-1 algorithm. Choose a different algorithm or use NSEC.”

How to fix DNS_ERROR_NSEC3_INCOMPATIBLE_WITH_RSA_SHA1

  1. Test connectivity to the remote host first (ping, then the exact port)
  2. Check firewall, VPN and proxy rules for the involved process
  3. Run 'ipconfig /flushdns' and 'netsh interface ip reset', then reboot

Related errors

DNS_ERROR_NSEC3_NAME_COLLISIONDNS_ERROR_NOT_ALLOWED_ON_SIGNED_ZONEDNS_ERROR_NOT_ENOUGH_SIGNING_KEY_DESCRIPTORSDNS_ERROR_KEYMASTER_REQUIREDDNS_ERROR_UNSUPPORTED_ALGORITHMDNS_ERROR_INVALID_KEY_SIZEDNS_ERROR_SIGNING_KEY_NOT_ACCESSIBLE

Source: Microsoft WinError.h

Last updated: