DS record points to old DNSKEY record
This alert notifies you that a Key Signing Key (KSK) rotation is in progress for the zone and the DS record handed out by a parent zone points to the old DNSKEY record. It means that DNSSEC cannot authenticate the DNS records because the key doesn't match.
ALERTS_DNSSECscope. For more information, contact your account administrator.
- Edge DNS
- New Alert - Up to 15 minutes since the detection of the condition.
- Alert Cleared - The condition is cleared for 20 to 35 minutes.
Follow the instructions from the Troubleshooting section on the alert’s page.