Groups | Blog | Home
all groups > sql server reporting services > october 2005 >

sql server reporting services : Backup Encryption Keys using rskeymgmt error:The local NT Service is disabled 0x80090005


david abel
10/19/2005 4:29:17 PM
Greetings, trying to install sp2 on our reporting server, following the
instructions I am trying to make a backup copy of the encryption keys using
the rskeymgmt utilitiy, and when I run the command and reply to the
verification msg, I get this msg back

The local NT Service is disabled 0x80090005

I have found a number of people hitting this on the web, but no replies as
to what was done to resolve the problem. Any information would be
B.C.
10/19/2005 6:30:10 PM
David,

Unfortunately I don't have an answer, as I am in exactly the same
situation. But I am curious as to a couple of things, which hopefully
will bring an answer to light.

We had to migrate to a new domain so the account originally used to
install and activate reporting services no longer exists. Also, I
routinely have an error in my application event log:
"Event 120.
Source: Schedule and Delivery Processor
Category: Activation
Description: Failed to decrypt symmetric key. Most likely cause is the
service username has changed."

Have you changed the account as well? Do you have the Event 120 error
in your Application event log?

I have seen a few references to using the rsconfig utility to update
the credentials, though after trying that I ended up being unable to
connect to existing reports. The error was to the effect of "SQL
Server does not exist or access denied". The syntax that ultimately
worked for me was: rsconfig -c -s SERVERNAME -d ReportServer -a windows
-u DOMAIN\Account -p *******

At any rate, I can connect to reports but am still unable to backup the
key. I've seen a few suggestions to use rskeymgmt to delete the key
and then restarting the service to create new keys, but I am reluctant
to try that without a little more information as to what will happen...


[quoted text, click to view]
abeljda
10/20/2005 12:21:19 PM
B.C.:
First of all thanks for the reply, hate talking to myself! Yes, we have
been getting the Event 120 error for some time now on this particular
server (over a year it appears) which makes me wonder if the key(s)
created are valid. Yesterday I noticed that whoever installed RS on
this server used an account to start the service that does not have
proper permissions. I changed the account to one that has SA rights to
start this service, but doing so did not fix the error The local NT
Service is disabled 0x80090005.

I too have seen the msgs about deleting the keys and recreating them,
but I feel the same as you, need more information before I do that. If
I figure this out I will definetly come back and post, please do the
same. Good luck!
J.G.
11/3/2005 4:45:07 PM
I've encountered the same error. We moved our computers(had a Production
Report Server and a QA Report Server) to a new domain and they didn't work
due to a change in the acct that ran the Report Server acct. This had to be
done as our old domain account was disabled.

We ran rsconfig -c -s SERVERNAME -d ReportServer -a windows
-u DOMAIN\Account -p ******* on the production server and that seemed to
rectify the issue. The QA server didn't fare as well. We ran the command on
it and it started showing "Event 120" errors. We ran rskeymgmt - s and the
report server came up but all of our reports were gone as well as the
datasources. Basically the QA server had to have all the datasources and
*.rdl repushed to QA.

Unfortunately, we are still getting the errors on our production Report
Server.

"Event 120.
Source: Schedule and Delivery Processor
Category: Activation
Description: Failed to decrypt symmetric key. Most likely cause is the
service username has changed."

The main reason we starting looking into the production Report Server was we
wanted to email some of the reports. We wanted to run them during off hours
and have the results sent via email.
We found out that we were unable to create new subscriptions to run
scheduled tasks and have them emailed. In addition all scheduled tasks
hadn't run since the migration of the computers from into the new domain. If
you have a solution to these it would be greatly appreciated.

[quoted text, click to view]
AddThis Social Bookmark Button