The credentials for the storage account used for the knowledge store are invalid or have expired

chris.c.zhao chris.c.zhao 25

Hi, I am trying to create knowledge store in portal in private endpoint. It can import the data and schema from my storage account 1, create a skill set, but when try to store knowledge store to the same account 'my storage account 1', it generated an error "The credentials for the storage account used for the knowledge store are invalid or have expired. I have tried system managed identity, sas token, regenerate key, shared private access link, same error. Can you please help?

chris.c.zhao chris.c.zhao 25 Reputation points

2024-02-09T22:19:42.64+00:00

my service pricing model is basic.
chris.c.zhao chris.c.zhao 25 Reputation points

2024-02-09T22:23:34.63+00:00

my service pricing model is basic. The import data is successful, output knowledge store always failed. For system managed identity of AI search it has contributor and read and data access role to my storage account.
chris.c.zhao chris.c.zhao 25 Reputation points

2024-02-09T22:23:55.3533333+00:00
chris.c.zhao chris.c.zhao 25 Reputation points

2024-02-09T22:24:20.6966667+00:00
ajkuma 24,971 Reputation points Microsoft Employee

2024-02-12T13:19:14.2166667+00:00

@chris.c.zhao chris.c.zhao , Apologies for the delayed response from over the weekend. I understand you have tried multiple steps to isolate the issue. If you haven’t done this already, please check if it’s due to firewall config. Configure an inbound rule for the IP address of your search service and the IP address range of AzureCognitiveSearch service tag. // Azure Storage

As outlined in this doc section: search-indexer-troubleshooting#firewall-rules - IP address range restrictions only work if your search service and your storage account are in different regions.

For more info checkout, Search Service fails to update an Indexer when the Storage account is behind a firewall blog for similar approach steps. Kindly let us know, I'll follow-up with you further.
chris.c.zhao chris.c.zhao 25 Reputation points

2024-02-12T16:10:43.2833333+00:00

I have no problem with import data from my storage to generate index, but I can't generate knowledge store.
chris.c.zhao chris.c.zhao 25 Reputation points

2024-02-12T17:47:25.7833333+00:00

I have no problem with import data to indexer from my storage account. But I can't generate knowledge store to my storage account.
chris.c.zhao chris.c.zhao 25 Reputation points

2024-02-12T19:33:45.82+00:00

my indexing is from portal
ajkuma 24,971 Reputation points Microsoft Employee

2024-02-13T20:43:37.0866667+00:00

Thanks for the follow-up and additional clarity. To dig more into this, we will need some additional info about the resources, I'll follow-up privately. In the interim, as a test, you may try granting the storage account the Storage Blob Data Contributor role. ( I understand that you mentioned above, it has contributor role).
BlazejM 5 Reputation points

2024-07-12T13:10:53.77+00:00

Hello both (@chris.c.zhao chris.c.zhao , @ajkuma)

I have now exactly the same problem.

Would it be possible to share a solution here, if problem was resolved?

Best regards.

Share via

The credentials for the storage account used for the knowledge store are invalid or have expired