Unable to restart the QV Directory Service Connector

[Anonymous]

Hello,

I was wondering if maybe someone has come acrossed this issue before.

Suddenly the QV Directory Service Connector is down in Production and I am unable to restart it.

I have checked the logs and can see the following

20170814T074825.295+0200 Information Initializing service

20170814T074825.489+0200 Error Exception while decrypting. EncryptedText length=8 chars Exception=System.Security.Cryptography.CryptographicException: Bad Data. ||  ||    at System.Security.Cryptography.CryptographicException.ThrowCryptographicException(Int32 hr) ||    at System.Security.Cryptography.Utils._DecryptData(SafeKeyHandle hKey, Byte[] data, Int32 ib, Int32 cb, Byte[]& outputBuffer, Int32 outputOffset, PaddingMode PaddingMode, Boolean fDone) ||    at System.Security.Cryptography.CryptoAPITransform.TransformFinalBlock(Byte[] inputBuffer, Int32 inputOffset, Int32 inputCount) ||    at System.Security.Cryptography.CryptoStream.FlushFinalBlock() ||    at System.Security.Cryptography.CryptoStream.Dispose(Boolean disposing) ||    at System.IO.Stream.Close() ||    at SolutionGlobal.Security.CryptoAlgorithm.Decrypt(EncryptedSecret encryptedSecret, Boolean isCurrentAlgorithm)

20170814T074825.503+0200 Error Exception while decrypting. EncryptedText length=8 chars Exception=System.Security.Cryptography.CryptographicException: Bad Data. ||  ||    at System.Security.Cryptography.CryptographicException.ThrowCryptographicException(Int32 hr) ||    at System.Security.Cryptography.Utils._DecryptData(SafeKeyHandle hKey, Byte[] data, Int32 ib, Int32 cb, Byte[]& outputBuffer, Int32 outputOffset, PaddingMode PaddingMode, Boolean fDone) ||    at System.Security.Cryptography.CryptoAPITransform.TransformFinalBlock(Byte[] inputBuffer, Int32 inputOffset, Int32 inputCount) ||    at System.Security.Cryptography.CryptoStream.FlushFinalBlock() ||    at System.Security.Cryptography.CryptoStream.Dispose(Boolean disposing) ||    at System.IO.Stream.Close() ||    at SolutionGlobal.Security.CryptoAlgorithm.Decrypt(EncryptedSecret encryptedSecret, Boolean isCurrentAlgorithm)

20170814T074825.524+0200 Error Found 2 item(s) with invalid encryption. Follows here in the log file:

20170814T074825.535+0200 Information Invalid encryption: XML file "C:\ProgramData\QlikTech\DirectoryServiceConnector\Resources\377f0086-6304-47c4-98b5-9ecb2066b443.xml", node "/dscresource/uid".

20170814T074825.544+0200 Information Invalid encryption: XML file "C:\ProgramData\QlikTech\DirectoryServiceConnector\Resources\377f0086-6304-47c4-98b5-9ecb2066b443.xml", node "/dscresource/pwd".

20170814T074825.554+0200 Error Shutting down the service since there are data with invalid encryption. To continue, activate the 'EraseUndecryptableData' config flag by setting it to true in the config file to erase the invalid data.

I have added the EraseUndecryptableData flag to the QVDirectoryServiceConnector config file but it makes no difference though not sure if I am placing it in the right section of the XML file.

Please any ideas would be really appreciated.

Thanks,

Tamara

[Anonymous]

Hi Tamara,

having same issue but with QMC. Have you solved this?

R,

[eerzmianagal · Accepted solution]

http://help.qlik.com/en-US/qlikview/12.1/Subsystems/Server/Content/QlikView%20Server/QVSRM_Certifica...

<appSettings>

    <!-- ****** General ****** -->

<add key="EraseUndecryptableData" value="true"/> 

[Anonymous]

Hi Gus,

Yes, we solved it. The fix was not working because I initially did not place the  EraseUndecryptableData flag in the right part of the XML. After a few tries we got it working.

Regards,

Tamara

[m_sharif]

Hi Tamara,

Could you please advise after which line you enter the EraseUndecryptableData flag?

and after adding this did you restarted all services?

Kind Regards

Muhammad

[pgrenier]

Thanks for the guidance!

Just a note for the future people needing to do this, once you restart the service, it will fail again but place a new message in the system logs:

Found # item(s) with invalid encryption that will be erased since the EraseUndecryptableData flag is active.

Shutting down service since the EraseUndecryptableData flag is activated. Turn off this flag before restarting the service.

You must then comment out this extra line in your QVDirectoryServiceConnector.exe.config file and restart the service once more.

Regards,

Philippe

[aadil_madarveet]

Thanks Erez! This helped solve the problem.

[aadil_madarveet]

Thanks Philippe!

This is true. Helped solve the problem.