The DNS server was unable to sign the zone %1 because it encountered an invalid DNSSEC signing key descriptor %2. The error ...

The DNS server was unable to sign the zone %1 because it encountered an invalid DNSSEC signing key descriptor %2. The error code encountered during validation was %3. Run the signing parameter validation on the Key Master for the zone to ensure that the signing key descriptors are valid.