Skip to content
HostupDevelopers
GuidesAPI referenceSupport

registry_lock_dnssec_incomplete

DNSSEC is not complete. HTTP status 409.

The zone is signed, but the registry does not hold a matching DS record yet. A registry lock would block adding or changing the DS record until the lock is removed.

What to do

Complete DNSSEC first, then switch the lock on. To lock the domain as it is, resend the request with acceptIncompleteDnssec: true and registrarLock: true.

What the message says

  • The zone is signed, but its DS record is not at the registry yet. While the registry lock is on, the DS record cannot be added or changed. Activate the lock once DNSSEC is complete, or resubmit with acceptIncompleteDnssec: true to lock the domain as it is.

Example

Response 409
{
  "type": "https://developer.hostup.se/errors/registry_lock_dnssec_incomplete",
  "title": "DNSSEC is not complete",
  "status": 409,
  "detail": "The zone is signed, but its DS record is not at the registry yet. While the registry lock is on, the DS record cannot be added or changed. Activate the lock once DNSSEC is complete, or resubmit with acceptIncompleteDnssec: true to lock the domain as it is.",
  "code": "registry_lock_dnssec_incomplete",
  "requestId": "req_01hxa3b4c5d6e7f8g9h0j1k2m3"
}

Branch on code, not on title or detail. When you contact support about it, include the requestId. More in Errors and retries.

Endpoints that return it