topic Re: Not possible to decrypt encrypted string in database in Qlik Automate

Not possible to decrypt encrypted string in database

qwerty71 — Thu, 30 Jan 2025 10:58:12 GMT

Hello!

I have some errors in logs:

Not possible to decrypt encrypted string in database; this is probably due to the secrets key on server certificate has been changed and the old database value hasn't; sending back empty result and leaving the value unchanged in database

Followed this topic Repository System Log Shows Error "Not possible to... - Qlik Community - 1713075

I tried to reset passwords for every connection(Data and User directory) but still two errors on application startup. Currently the problem is that users with SAML authentication have been redirected in a never-ending loop. So I assume those decryption errors are related.

Can you give me direction what to check for the fix? maybe there are some more informative logs, which connection or which secret key couldn't decrypt?

Thanks!

Re: Not possible to decrypt encrypted string in database

mpc — Sat, 01 Feb 2025 10:12:51 GMT

Hi,

Did you perform any change in certificates ?
For the DB connection, the login info are encrypted by the Qlik generated ones.

But for SAML it uses a custom signed one, that you install on the machine and register its thumbprint under the proxy service section.
If this one expires or changes, the SAML configuration will not work, and you will need to reconfigure it based on this reference document: Configuring SAML | Qlik Sense for administrators Help

Best

Re: Not possible to decrypt encrypted string in database

qwerty71 — Tue, 04 Feb 2025 10:16:08 GMT

I didn't touch certificates. The problem comes from silent installation of Qlik_PostgreSQL_setup_1.4.0.exe, 12.5 to 14.8 migration wasn't smooth and QlikSense went in some weird state. I had to configure unbundled database manually and restore data from backup.

Re: Not possible to decrypt encrypted string in database

mpc — Wed, 05 Feb 2025 06:40:32 GMT

Did you try to reconfigure the Virtual Proxy with the SAML auth after the restore ?

Re: Not possible to decrypt encrypted string in database

Ezhil — Tue, 25 Mar 2025 10:33:18 GMT

Hi @qwerty71 @mpc ,

Any solution for this one, we are facing the similar issues after upgrading from Nov 2023 to Nov 2024 version.

Thanks you!!!

Re: Not possible to decrypt encrypted string in database

mpc — Mon, 07 Apr 2025 07:35:27 GMT

Hi,

Did you try to recreate certificate following the process: How to recreate or just delete certificates in Qli... - Qlik Community - 1712692

Best

Re: Not possible to decrypt encrypted string in database

Ezhil — Wed, 09 Apr 2025 13:47:29 GMT

Yes @mpc

We are facing the issue after we upgraded from Nov 2023 to Nov 2024/May 2024 version. We recreated the certificates and tried deleted/imported the backup certificates also but facing the same issue.

Thank you!!

Re: Not possible to decrypt encrypted string in database

mpc — Wed, 09 Apr 2025 14:24:37 GMT

Ok,

Then maybe you need to change this in all the microservice config file, see section 3: How to change the Qlik Sense Enterprise on Windows... - Qlik Community - 2046846

Best