Remove-DnsServerSigningKey

Remove-DnsServerSigningKey

Removes signing keys.

Syntax

Parameter Set: Remove2
Remove-DnsServerSigningKey [-ZoneName] <String> [-KeyId] <Guid[]> [-AsJob] [-CimSession <CimSession[]> ] [-ComputerName <String> ] [-Force] [-PassThru] [-ThrottleLimit <Int32> ] [-Confirm] [-WhatIf] [ <CommonParameters>]

Detailed Description

The Remove-DnsServerSigningKey cmdlet removes one or more signing keys from the specified zone. This cmdlet removes signing keys on an unsigned zone that you incorrectly configured. This cmdlet cannot remove active signing keys from a signed zone.

Parameters

-AsJob

-CimSession<CimSession[]>

Runs the cmdlet in a remote session or on a remote computer. Enter a computer name or a session object, such as the output of a New-CimSession or Get-CimSession cmdlet. The default is the current session on the local computer.

-ComputerName<String>

Specifies a remote DNS server. You can specify an IP address or any value that resolves to an IP address, such as a fully qualified domain name (FQDN), host name, or NETBIOS name.

-Force

Removes the signing keys without prompting you for confirmation. By default, the cmdlet prompts you for confirmation before it proceeds.

-KeyId<Guid[]>

Specifies an array of key identifiers.

-PassThru

Returns an object representing the item with which you are working. By default, this cmdlet does not generate any output.

-ThrottleLimit<Int32>

Specifies the maximum number of concurrent operations that can be established to run the cmdlet. If this parameter is omitted or a value of 0 is entered, then Windows PowerShell® calculates an optimum throttle limit for the cmdlet based on the number of CIM cmdlets that are running on the computer. The throttle limit applies only to the current cmdlet, not to the session or to the computer.

-ZoneName<String>

Specifies the name of the zone in which DNS Security Extensions (DNSSEC) operations are performed.

-Confirm

Prompts you for confirmation before running the cmdlet.

-WhatIf

Shows what would happen if the cmdlet runs. The cmdlet is not run.

<CommonParameters>

This cmdlet supports the common parameters: -Verbose, -Debug, -ErrorAction, -ErrorVariable, -OutBuffer, and -OutVariable. For more information, see    about_CommonParameters (https://go.microsoft.com/fwlink/p/?LinkID=113216).

Inputs

The input type is the type of the objects that you can pipe to the cmdlet.

Outputs

The output type is the type of the objects that the cmdlet emits.

• Microsoft.Management.Infrastructure.CimInstance#DnsServerSigningKey[]

Examples

Example 1: Remove signing keys for a zone

This first part of the command gets the DNS server signing keys for the west.contoso.com zone and passes the results to the Remove-DnsServerSigningKey cmdlet by using the pipe operator. The second part of the command removes DNS server signing keys.

PS C:\> Get-DnsServerSigningKey -ZoneName "west.contoso.com" | Remove-DnsServerSigningKey

Example 2: Remove a single signing key for a zone

This command removes the signing key that has the ID 6ff2c4b3-3eeb-4074-908f-bca0cca153c7 from the zone named contoso.com.

PS C:\> Remove-DnsServerSigningKey -ZoneName contoso.com -KeyId "6ff2c4b3-3eeb-4074-908f-bca0cca153c7"

Related topics

Add-DnsServerSigningKey

Disable-DnsServerSigningKeyRollover

Enable-DnsServerSigningKeyRollover

Get-DnsServerSigningKey

Invoke-DnsServerSigningKeyRollover

Set-DnsServerSigningKey