Not possible to decrypt encrypted string in database

[qwerty71]

Hello!

I have some errors in logs:

Not possible to decrypt encrypted string in database; this is probably due to the secrets key on server certificate has been changed and the old database value hasn't; sending back empty result and leaving the value unchanged in database

Followed this topic Repository System Log Shows Error "Not possible to... - Qlik Community - 1713075  

I tried to reset passwords for every connection(Data and User directory) but still two errors on application startup. Currently the problem is that users with SAML authentication have been redirected in a never-ending loop. So I assume those decryption errors are related.

Can you give me direction what to check for the fix? maybe there are some more informative logs, which connection or which secret key couldn't decrypt?

Thanks!

[mpc]

Hi, 

Did you perform any change in certificates ? 
For the DB connection, the login info are encrypted by the Qlik generated ones. 

But for SAML it uses a custom signed one, that you install on the machine and register its thumbprint under the proxy service section. 
If this one expires or changes, the SAML configuration will not work, and you will need to reconfigure it based on this reference document: Configuring SAML | Qlik Sense for administrators Help

Best

[qwerty71]

I didn't touch certificates. The problem comes from silent installation of Qlik_PostgreSQL_setup_1.4.0.exe, 12.5 to 14.8 migration wasn't smooth and QlikSense went in some weird state. I had to configure unbundled database manually and restore data from backup.

[mpc]

Did you try to reconfigure the Virtual Proxy with the SAML auth after the restore ? 

[Ezhil]

Hi @qwerty71 @mpc ,

Any solution for this one, we are facing the similar issues after upgrading from Nov 2023 to Nov 2024 version.

Thanks you!!!

[mpc]

Hi, 

Did you try to recreate certificate following the process: How to recreate or just delete certificates in Qli... - Qlik Community - 1712692

Best

[Ezhil]

Yes @mpc 

We are facing the issue after we upgraded from Nov 2023 to Nov 2024/May 2024 version. We recreated the certificates and tried deleted/imported the backup certificates also but facing the same issue.

Thank you!!

[mpc]

Ok, 

Then maybe you need to change this in all the microservice config file, see section 3: How to change the Qlik Sense Enterprise on Windows... - Qlik Community - 2046846

Best