Virtualization

DNS Bad key 9017: The Cluster Name registration failed of one or more associated DNS names

FailedRegistration

Active Directory Domain Services (AD DS) uses Domain Name System (DNS) name resolution services to make it possible for clients to locate domain controllers and for the domain controllers that host the directory service to communicate with each other. AD DS enables easy integration of the Active Directory namespace into an existing DNS namespace. Features such as Active Directory-integrated DNS zones make it easier for you to deploy DNS by eliminating the need to set up secondary zones, and then configure zone transfers.. Kindly refer to the following related guides: How to setup a cache-only DNS server, how to locate and edit the hosts file on Windows, how to install RSAT tools: DNS manager console missing from RSAT tools on Windows 10, how to setup SPF and TXT Records in AWS, how to add and verify a custom domain name to Azure Active Directory, Active Directory: How to Setup a Domain Controller, how to locate and edit the host file on macOS, and how to know when an IP or domain has been blacklisted.

When you first create a cluster, Hyper-V creates a Cluster network name resource for use in identifying your cluster via DNS. Also, a DNS record for the static IP address of the cluster is created in AD DNS. Here is a similar error that you might encounter: Failover Cluster Manager failed while managing one or more clusters, the error was unable to determine if the computer exists in the domain. 

Problem – Invalid DNS Entry: The cluster name resource which has been added to the DNS prior to setup active passive cluster and it needs to be updated by the Physical nodes on behalf of the resource record itself. When the active node owns the resources it want to update the A record in the DNS database and DNS record which was created won’t allow any authenticated user to update the DNS record with the same owner.

  • Follow the solution recommended below and ensure the “Allow any authenticated user to update DNS records with the same owners name” is checked. Here is a similar error: Domain Name System: How to create a DNS record. To fix this issue, you will have to delete you the DNS record your precreated for the cluster node in order to associate the “Allow any authenticated user to update DNS records with the same owners name”. Below are the associated error for your information only.

Select the specic record and right click on it. Select Delete to delete the DNS record previously created.

Screenshot-2021-07-13-at-03.22.09

Confirm by clicking on Yes that you would like to delete the record as shown below.

Screenshot-2021-07-13-at-03.23.01

To add an A record, kindly launch the DNS snap-in as shown below. From the Server Manager, click on Tools and then select Server Manager.
– In the console tree, right-click the applicable forward lookup zone, and then click New Host (A or AAAA) as shown below. See this guide for the different types of DNS Records you can create. See this guide for more information: Domain Name System: How to create a DNS record

Screenshot-2021-07-13-at-03.23.29

Ensure the “Allow any authenticated user to update DNS records with the same owners name”. If you have the Reverse Arpa zone configured and want the PTR record automatically added, make sure the Create Associated PTR record is checked
– Click on Add Host when your are done.

Screenshot-2021-07-13-at-03.24.52-1

As you can see below, the record has been successfully created.Kindly refer to these troubleshooting guides for some insights: The following error occurred when DNS was queried for the service location (SRV): Error code 0x0000232B RCODE_NAME_ERROR, and the following errors occurred attempting to join the domain: The specified domain either does not exist or could not be contacted.

Screenshot-2021-07-13-at-03.25.42

And the events are cleared and error no longer persist as shown in the figure below.

Screenshot-2021-07-13-at-03.47.10

Other Suggestions: Also ensure the associated network interfaces only have DNS records for your internal DNS server. Remove the external DNS address. Check that your DNS Server does not have any public DNS servers specified; for example 8.8.8.8 or 1.1.1.1

Lastly, if all the above mentioned steps do not work for you, please take your Cluster resource offline, run a repair!
- This will not affect your VMs.

I hope you found this blog post helpful. If you have any questions, please let me know in the comment session.

Subscribe
Notify of
guest

0 Comments
Inline Feedbacks
View all comments
0
Would love your thoughts, please comment.x
()
x