Cryptography error trying to export acl using aemctl in Enterprise Manager

[qlik_admin_lm]

I am running this command on an EC2 server where Enterprise Manager is installed:

c:\"Program Files"\Attunity\"Enterprise Manager"\bin\aemctl.exe repository export_acl -f c:\temp\acl.json -r "d:\data\cfgrepo.sqlite"

and am recieving this exception: System.Reflection.TargetInvocationException: Exception has been thrown by the target of an invocation. ---> System.TypeInitializationException: The type initializer for 'Attunity.Services.
AttEnvironment.EnvironmentService' threw an exception. ---> System.Security.Cryptography.CryptographicException: The data protection operation was unsuccessful. This may have been caused by not having the user
profile loaded for the current thread's user context

Any idea why this is happening and how I can fix it?  I can run the same command on an on-prem Windows server without a problem.

[john_wang]

Hello @qlik_admin_lm ,

Thanks for opening the article and the support ticket. I'm pasting the resolution of the case for reference:

QEM does require HTTPS for secure communication, and by default, it generates a self-signed certificate. The issue you’re running into is likely because the system is trying to use encryption or secure communication, and the self-signed cert isn’t fully trusted in this setup.

Since you’re running everything through SSM, which also relies on HTTPS, it’s possible that QEM’s security settings are causing the error when aemctl tries to execute commands. The best way to resolve this would be to replace the self-signed certificate with one issued by a trusted CA. If that’s not an option right now, you can try importing the self-signed cert into the Windows Trusted Root Certificate Store to see if that allows the commands to run successfully.

Regards,

John.