We are using windows 2022 server with SQL 2022, the problem is that after sysprep execute ,sql analysis failed with Error:Failed to encrypt sensitive data. Possibly the encryption key is inaccessible because of improper service account change

Kasireddy Alekhya Alekhya (MINDTREE LIMITED) 0

After upgrade the image to win22 and sql22. Not able to run bam Analysis service getting error Microsoft.BizTalk.Bam.Management.BamManagerException: The BAM deployment failed. ---> Microsoft.AnalysisServices.OperationException: Errors in the encryption library: Failed to encrypt sensitive data. Possibly the encryption key is inaccessible because of improper service account change.

1 answer

Greg Low 1,495 Reputation points Microsoft Regional Director

2024-02-10T03:00:00.0066667+00:00

Have you changed the service account? (Sounds like it if you've upgraded).

Check out the discussion here: https://learn.microsoft.com/en-us/archive/msdn-technet-forums/afcc5b55-8429-4eed-a3f1-30e735e41359
Please sign in to rate this answer.
Kasireddy Alekhya Alekhya (MINDTREE LIMITED) 0 Reputation points

2024-02-12T05:58:12.24+00:00

Thank you for the response. No, we didn't change the service account. SQL server 2022 freshly installed in the vm. we faced this issue when we Generalize the vm(i.e. Sysprep execution). Before generalizing (i.e. Sysprep execution) the vm we are not facing any issue everything working fine.

we tried the above-mentioned reference link, but issue is not resolved.

Greg Low 1,495 Reputation points Microsoft Regional Director

2024-02-12T06:00:35.72+00:00

But if you generalize the VM, after you rehydrate it, you will have lost any entries in DPAPI which is where that's stored.

Kasireddy Alekhya Alekhya (MINDTREE LIMITED) 0 Reputation points

2024-02-21T05:34:23.5566667+00:00

Hi Gerg, we have verified related to DPAPI entries in generalized vm in below location there are no entries available.
C:\Users$USER\AppData\Roaming\Microsoft\Protect$SUID We also verified the DPAPI entries in vm before generalizing there are no entries available in above path. I am assuming that the above issue is not related entries in DPAPI. Can you please suggest.

Greg Low 1,495 Reputation points Microsoft Regional Director

2024-02-21T07:34:23.52+00:00

In the article at that link, Shaik said he did this: = = =
Delete the contents of the following folder (take a backup in case...) C:\Program Files\Microsoft SQL Server\MSAS10.MSSQLSERVER\OLAP\Data\BAMAnalysis.0.db Restart SQL Analysis service if it does not work then copy 0.CryptKey.bin under above path And again restart the SQL Analysis service It worked with me. = = =
Did you happen to try that?

Kasireddy Alekhya Alekhya (MINDTREE LIMITED) 0 Reputation points

2024-02-28T05:17:41.5966667+00:00

yes, we have tried above steps those not working.
We tried all possibilities available in different articles.
Sign in to comment