Groups | Blog | Home
all groups > sql server reporting services > may 2006 >

sql server reporting services : Trying to Start Reporting Services - Cannot Decrypt Symmetric Key


JonOfAllTrades
5/1/2006 7:32:01 AM
Good morning. I've been trying to get Reporting Services off the ground on
my MS SQL 2K5 install, and I finally found a useful error message:

ReportingServicesService!library!8!5/1/2006-09:01:07:: e ERROR: Throwing
Microsoft.ReportingServices.Diagnostics.Utilities.ReportServerDisabledException:
The report server cannot decrypt the symmetric key used to access sensitive
or encrypted data in a report server database. You must either restore a
backup key or delete all encrypted content. Check the documentation for more
information., ;
Info:
Microsoft.ReportingServices.Diagnostics.Utilities.ReportServerDisabledException:
The report server cannot decrypt the symmetric key used to access sensitive
or encrypted data in a report server database. You must either restore a
backup key or delete all encrypted content. Check the documentation for more
information. ---> System.Runtime.InteropServices.COMException (0x80090005):
Bad Data. (Exception from HRESULT: 0x80090005)
at
System.Runtime.InteropServices.Marshal.ThrowExceptionForHRInternal(Int32
errorCode, IntPtr errorInfo)
at RSManagedCrypto.RSCrypto.ImportSymmetricKey(Byte[] symKeyBlob)
at Microsoft.ReportingServices.Library.ConnectionManager.GetEncryptionKey()
--- End of inner exception stack trace ---

Can anyone tell me where to take this? This is a new install on a
JonOfAllTrades
5/1/2006 8:01:02 AM
[quoted text, click to view]

Looks like I jumped the gun a bit on posting this last. From further
research, it's seems that my best bet is to let Reporting Services delete
encrypted data, and presumably create a new key. Exactly what data will it
delete? The only answer I can guess is "whatever reports were created with
other accounts." There are none - I have not setup any reports. But the
phrase "delete files" makes my IT antennae twitch. Has anyone here followed
this procedure? Is that indeed all that it deletes when reseting the
bhorwatt
5/1/2006 11:42:03 AM
It deletes all of the connection strings in your data sources on the server
and resets credentials to 'credentials supplied by the user running the
report'. The latter means when reports are first run, it prompts for a user
name and password. I guess these are the items that were encrypted.

[quoted text, click to view]
JonOfAllTrades
5/2/2006 8:49:02 AM
[quoted text, click to view]

Thank you for responding. With that assurance, I tried to delete encrypted
content, with the hope that I could then get Reporting Service to start.
However, it dropped yet another error on me:

ReportServicesConfigUI.WMIProvider.WMIProviderException: An error occurred
when attempting to connect to the report server remote procedure call (RPC)
end point. Verify that the Report Server Windows service is running, and then
retry the operation.

---> System.Runtime.InteropServices.COMException (0x800706B3): The RPC
server is not listening. (Exception from HRESULT: 0x800706B3)
--- End of inner exception stack trace ---
at
ReportServicesConfigUI.WMIProvider.RSReportServerAdmin.ThrowOnError(ManagementBaseObject mo)
at
ReportServicesConfigUI.WMIProvider.RSReportServerAdmin.DeleteEncryptedInformation()

The RPC service is running, but it throw an error in the event log, claiming
that the RPC service failed to start. It's been running ever since the
machine booted. Immediately after that in the log is an error from Reporting
Services, saying that the service could not start, "The user or group name
'DIMRS1\ASPNET' is not recognized." The ASPNET user exists in AD, but RS is
configured to use LocalSystem. Should I reinstall .NET to reset the ASPNET
AddThis Social Bookmark Button