This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(220.8, 40%, 31%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EKA%3C/text%3E%3C/svg%3E)
After upgrade the image to win22 and sql22. Not able to run bam Analysis service getting error Microsoft.BizTalk.Bam.Management.BamManagerException: The BAM deployment failed. ---> Microsoft.AnalysisServices.OperationException: Errors in the encryption library: Failed to encrypt sensitive data. Possibly the encryption key is inaccessible because of improper service account change.
Have you changed the service account? (Sounds like it if you've upgraded).
Check out the discussion here: https://learn.microsoft.com/en-us/archive/msdn-technet-forums/afcc5b55-8429-4eed-a3f1-30e735e41359
Thank you for the response. No, we didn't change the service account. SQL server 2022 freshly installed in the vm. we faced this issue when we Generalize the vm(i.e. Sysprep execution). Before generalizing (i.e. Sysprep execution) the vm we are not facing any issue everything working fine.
we tried the above-mentioned reference link, but issue is not resolved.
But if you generalize the VM, after you rehydrate it, you will have lost any entries in DPAPI which is where that's stored.
Hi Gerg,
we have verified related to DPAPI entries in generalized vm in below location there are no entries available.
C:\Users$USER\AppData\Roaming\Microsoft\Protect$SUID
We also verified the DPAPI entries in vm before generalizing there are no entries available in above path.
I am assuming that the above issue is not related entries in DPAPI. Can you please suggest.
In the article at that link, Shaik said he did this:
= = =
Delete the contents of the following folder (take a backup in case...)
C:\Program Files\Microsoft SQL Server\MSAS10.MSSQLSERVER\OLAP\Data\BAMAnalysis.0.db
Restart SQL Analysis service
if it does not work then copy 0.CryptKey.bin under above path
And again restart the SQL Analysis service
It worked with me.
= = =
Did you happen to try that?
yes, we have tried above steps those not working.
We tried all possibilities available in different articles.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(278.4, 1%, 36%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EGR%3C/text%3E%3C/svg%3E)
I might be late to the party, but what was the thing for our case. We moved the data directory scripting-wise. Somehow the keys got mixed up. I haven't figured a way out yet, but when you remove those keys on the directory you change it to, copy over the CryptKey and CryptKeyGen2 files to this directory, and try to restart the service, it should work.