Cryptographic exception in sharepoint - key not valid for use

Hi,
I have created a sharepoint application page to access an active end point on ADFS and establish a fedauth session. All works well in single server. But when the page runs behind load balancer with 2 servers, it fails with key not valid for use in specified
state exception. Stickiness is enabled on load balancer. verified that.
I had made few changes to config file in microsoft.identitymodel section to accomodate adfs custom login. This included removing securitytokenhandlers and issuertokenresolvers as well. Is this impacting the encryption/decryption in anyway?
Any pointers would help.
Reference point for my application page : http://blog.helloitsliam.com/Lists/Posts/Post.aspx?ID=76

Thanks Brandon ,
But your support page presents a solution for the problem
regarding SSRS in "not integad whith sharepoint" mode <--Reporting Services Configuration tool
By consulting web, I discovered that another people
they encountered
the same problem->http://social.msdn.microsoft.com/Forums/en-US/35517aee-89d0-4668-94fc-9c7668e9dc35/unable-to-create-the-ssrs-service-application-in-sharepoint-ca?forum=sqldenreportingservices
But there is no solution there !!

Similar Messages

Reporting Service Integration mode and Key not valid for use in specified state

I had to uninstall SharePoint Foundation 2013 and reinstall it.
What I have done:
I uninstalled SharePoint and after that I removed all databases.
I reinstalled SharePoint Foundation 2013 and it completed without errors.
Everything else is working, except SSRS in Sharepoint Integrated Mode.
If I check Central Administration - Manage services on server, I can found out that SQL Server Reporting Service Service is
"Started". But if I try to create new service application (SQL Server Reporting Services Service Application), it gives me an error message:
"Key not valid for use in specified state. (Exception from HRESULT: 0x8009000B)"
I uninstalled SSRS in Sharepoint Integrated Mode and I reinstalled it but problems exists.
It seems that "Encryption Keys" cause this problem.
https://support.microsoft.com/kb/955757
https://msdn.microsoft.com/en-us/library/ms156010%28v=sql.110%29.aspx
I tried to Re-create Encryption Keys and Delete keys, but its not working either. It gives me only error message that:
"Unable to locate the Reporting Server Windows service for instance MSSQLSERVER."
I don't have any reporting server databases, because I removed all
databases when I uninstalled SharePoint. Also I don't have Encryption
Keys backups.
I have found several similar question but no answer, example here:
https://social.technet.microsoft.com/Forums/ie/en-US/df02dc05-5ce8-499d-9ba3-ab392a5fc3af/sharepoint-2013-ssrs-application-error-key-not-valid-for-use-in-specified-state-exception?forum=sharepointdevelopment
Any ideas how I can fix this problem?

Hi,
From the Reporting Server Configuration Manager you have to restore the encryption key.
Please try to delete databases(reportserver & reportservertempdb) and delete the reportserver and reports site on IIS. Then you have to start over the configuration again.
If the issue still exists, Please check ULS log to see if anything unexpected occurred.
For SharePoint 2013, by default, ULS log locates in
"C:\Program Files\Common Files\Microsoft Shared\Web Server Extensions\15\LOGS"
More information about SQL Reporting services Installation with SharePoint 2013 for your reference:
http://expertsharepoint.blogspot.de/2014/03/sql-reporting-services-installation.html
Best Regards,
Dennis Guo
TechNet Community Support
Please remember to mark the replies as answers if they help, and unmark the answers if they provide no help. If you have feedback for TechNet Support, contact
[email protected]

Site behind load balancer - Key not valid for use in specified state

Hi,
I have created a sharepoint application page to access an active end point on ADFS and establish a fedauth session. All works well in single server. But when the page runs behind load balancer with 2 servers, it fails with key not valid for use in specified
state exception. Stickiness is enabled on load balancer. verified that.
I had made few changes to config file in microsoft.identitymodel section to accomodate adfs custom login. This included removing securitytokenhandlers and issuertokenresolvers as well. Is this impacting the encryption/decryption in anyway?
Any pointers would help.
Reference point for my application page : http://blog.helloitsliam.com/Lists/Posts/Post.aspx?ID=76

Hi,
As I understand, you encountered the error “Key not valid for use in specified state” when ADFS custom login.
In order to run in Windows Azure Web Sites a Web application which uses WIF for handling authentication, you must change the default cookie protection method (DPAPI, not available on Windows Azure Web Sites) to something that will work in a farmed environment
and with the IIS’ user profile load turned off.
1. If you are using the Identity and Access Tools for VS2012, just go to the Configuration tab and check the box “Enable Web farm ready cookies”.
2. If you want to do things by hand, add the following code snippet in your system.identitymodel/identityConfiguration element:
   <securityTokenHandlers>
     <add type="System.IdentityModel.Services.Tokens.MachineKeySessionSecurityTokenHandler,
             System.IdentityModel.Services, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089" />
      <remove type="System.IdentityModel.Tokens.SessionSecurityTokenHandler,
            System.IdentityModel, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089" />
    </securityTokenHandlers>
There is a similar case:
http://stackoverflow.com/questions/19323287/key-not-valid-for-use-in-specified-state-error-for-net-4-5-mvc-4-application
Best regards,
Sara Fan
TechNet Community Support
Please remember to mark the replies as answers if they help, and unmark the answers if they provide no help. If you have feedback for TechNet Support, contact
[email protected]

Key not valid for use in specified state when running install_reader11_en_mssd_aaa_aih

After downloading, Version XI (11.0.08)
at
http://get.adobe.com/reader/download/?installer=Reader_11.0.08_English_for_Windows&os=Wind ows%207&browser_type=KHTML&browser_dist=Chrome&d=McAfee_Security_Scan_Plus_Chrome_Browser& dualoffer=false
running, and installing _reader11_en_mssd_aaa_aih
I get "
adobe reader installer error
key not valid for use in specified state
Using Windows 7, tried google chrome and firefox browsers
system report created but could not send

This worked:
Solution 2: Re-create the Crypto folder.
Close Acrobat.
In Windows Explorer, do one of the following:
On Windows XP, navigate to C:\Documents and Settings\[your user name]\Application Data\Microsoft.
On Windows Vista, navigate to C:\Users\[your user name]\AppData\Roaming\Microsoft.
Note: These paths include hidden folders. To make hidden folders visible, see "Windows Tip - Show hidden files and folders" (TechNote kb402324).
Rename the Crypto folder as Crypto Old.
Open Acrobat. The Crypto folder will be re-created automatically.
Error: "Creation of this signature could not be completed. Platform Exception" when you sign a PDF (Acrobat 8, 9 on Wind…
Then deleted wse_andromenda files in control panel programs, run regedit

Key not valid for use in specified state - installation error

I am trying to install Adobe Reader XI on a Windows 7 computer at work and I get this error message: "key not valid for use in specified state." What is going on and how do I fix the problem so that i can install Adobe Reader?

This worked:
Solution 2: Re-create the Crypto folder.
Close Acrobat.
In Windows Explorer, do one of the following:
On Windows XP, navigate to C:\Documents and Settings\[your user name]\Application Data\Microsoft.
On Windows Vista, navigate to C:\Users\[your user name]\AppData\Roaming\Microsoft.
Note: These paths include hidden folders. To make hidden folders visible, see "Windows Tip - Show hidden files and folders" (TechNote kb402324).
Rename the Crypto folder as Crypto Old.
Open Acrobat. The Crypto folder will be re-created automatically.
Error: "Creation of this signature could not be completed. Platform Exception" when you sign a PDF (Acrobat 8, 9 on Wind…
Then deleted wse_andromenda files in control panel programs, run regedit

"Key not valid for use in specified state" after IIS Reset?

I have had a ton of issues with the System.Security.Cryptography.CryptographicException: Key not valid for use in
specified state. error. This seems to only occur now when IIS is reset and I try to resume my browsing session. So I am logged into the application, I reset IIS on the server, refresh the page and see the error.
I am building an application in .NET 4.0 MVC with a Secure Token Service that is using WIF 4.0. Everything works as expected, except this case. I even tried to use a custom error page, but the error is happening there as well. Because of that, I can't get the
custom page to show either. One thing I noticed is that if I switch my IIS APP Pool user back to Network Service account it doesn't throw the error any more. We have some restrictions (mostly network related) in the application that we need to use an account
in our AD for the app pool sections
Anybody have any experience with this issue?

Hi Shennessy,
In my opinion, this thread is related to ASP.NET forum. So please post thread on that forum for more effective response. Thank you for understanding. Please refer to the following link.
http://forums.asp.net/.
Regards,
We are trying to better understand customer views on social support experience, so your participation in this interview project would be greatly appreciated if you have time. Thanks for helping make community forums a great place.
Click
HERE to participate the survey.

Failed to decrypt protected XML node "DTS:Password" with error 0x8009000B "Key not valid for use in specified state

we have developed packages to do the followings
Extract data from DB2 Source and put it in MS Sql Server 2008 database (Lets Say DatabaseA).From MS Sql Server 2008 (DatabaseA)
we will process the data and place it in another database MS Sql Server 2008 (DatabaseB)
We have created packages in BIDS..We created datasource connection in Datasource folder in BIDS..Which has DB2 Connection and both Ms Sql Server connection (Windows authentication-Let
say its pointing to the server -ServerA which has DatabaseA and DatabaseB).The datasource connections will be used in packages during development.
For deployment we have created Package Configuration which will have both DB2 Connection and MS SqlServer connection in the config
We deployed the packages in different MS SqlServer by changing the connectionstring in the config for DB2 and MS SqlServer...
While runing the package we are getting the following error message
Code: 0xC0016016 Source: Description: Failed to decrypt protected XML node "DTS:Password" with error 0x8009000B "Key not valid for
use in specified state.". You may not be authorized to access this information. This error occurs when there is a cryptographic error. Verify that the correct key is available.
ilikemicrosoft

Hi Surendiran,
This is because the package has been created by somebody else and the package is being deployed under sombody else's account. e.g. If you are the creator then the package is encryption set according to your account and the package setup in SQL server is
under a different user account.
This happens because the package protection level is set to EncryptSensitiveWithUserKey which encrypts
sensitive information using creator's account name.
As a solution:
Either you have to set up the package in SQL server under your account (which some infrastructures do not allow).
OR
Set the package property Protection Level to "DontSaveSensitive" and add a configuration file
to the package and set the initial values for all the variables and all the connection manager in that configuration file (which might be tedious of-course).
OR
The third options (which I like do) is to open the package file and delete the password encryption entries from the package. Do note that this is not supported by designer and every time you make changes to the connection managers these encryption entries come
back.
Hope this helps.
Please mark the post as answered if it answers your question

DontSaveSensitive; Key not valid for use in specified state error

I initially had my packages set to 'EncryptSensitivewithPassword' and usedthe config files. My job executes fine. But I noticed I was getting THE error "......Key not valid for use in specified state.....". So, I change the protection level
to 'DontSaveSensitive' , saved packaged ,build and re-imported it. And I still get the same result.
What am I doing wrong??   Package is on the same server where it was built.
I have a package in production that executes without the error. I made a change to the package (logging) in test and now it also encounters same error as the package referenced above.

created ssis package logged in as testsrvr\admin; tests fine.
      protection level - don't save sensitive
      use xml config files
move to production server logged in as prodsrvr\admin; tests fine in bids.
exec package via sql agent (runs under domain\prodsrvr account ). Both attempt same package
job attempt #1
type - cmdexec
run as - SQL Agent Service account
command - exec using dtexec.exe /SQL "\DS\DSU002A 586SSN_TO_SQL" /SERVER SQLDRK51 /MAXCONCURRENT " -1 " /CHECKPOINTING OFF /REPORTING EW
receive error
Executed as user: ILSOS\sqldrk51. ... 9.00.4035.00 for 32-bit Copyright (C) Microsoft Corp 1984-2005. All rights reserved.    Started: 7:00:00 PM Error: 2010-08-30 19:00:00.33     Code: 0xC0016016
Source:       Description: Failed to decrypt protected XML node "DTS:Password" with error 0x8009000B "Key not valid for use in specified state.". You may not be authorized to access this information. This error occurs when there
is a cryptographic error. Verify that the correct key is available. End Error Error: 2010-08-30 19:00:00.35     Code: 0xC0016016     Source:       Description: Failed to decrypt
protected XML node "DTS:Password" with error 0x8009000B "Key not valid for use in specified state.". You may not be authorized to access this information. This error occurs when there is a cryptographic error. Verify that the correct key is available.
End Error Error: 2010-08-30 19:00:00.35     Code: 0xC0016016     Source:       Description: Failed to decrypt... Process Exit Code 0. The step succeeded.
Job Attempt #2
type SSIS
run as SQL Agent Service account
package source file system
package - I:\SSISProjects\DSU002 Viisage Data Transfers\Viisage Data Transfers\DSU002A 586SSN_TO_SQL.dtsx
no error
Executed as user: ILSOS\sqldrk51. Microsoft (R) SQL Server Execute Package Utility Version 9.00.4035.00 for 32-bit Copyright (C) Microsoft Corp 1984-2005. All rights reserved.    Started: 12:54:03 PM DTExec: The package
execution returned DTSER_SUCCESS (0). Started: 12:54:03 PM Finished: 12:54:08 PM Elapsed: 4.953 seconds. The package executed successfully. The step succeeded.

ERROR: "key not valid for use in specified state" when updating to Lightroom 5.6 in Win8.1

While doing a routine update from Lightroom 5.5 to v5.6 in Win 8.1, the installation halted at the start of the installation with the vague error message, "key not valid for use in specified state". Although v5.5 was working just fine, the install routine deleted the v5.5 application files. I rolled back to the previous system restore point (set just prior to the install) and recovered the executable files. However, now the 5.5 files won't open the default catalog, none of the backups, or even create a new catalog.
As v5.x was purchased as an update to v4.x, I've tried to reinstall the original Lightroom v4.x app from the factory disk. I get the same error.
Suggestions?
Thanks. Dan

I have a similar problem to Dan. while doing a routine upgrade from Lightroom 5.5 to 5.6 I got the
: "key not valid for use in specified state"
error and now Lightroom has completely disappeared. I've tried to uninstall, but there is nothing to uninstall. Going back to try to install the original 5.4 just results in the same error.
A problem may have been that I closed Lightroom when the upgrade started to download. It then re-opened again when the install was halfway through., I assumed that was an error and closed it. just after that the error first appeared in the installer.
I still had an older version of lightroom 4 installed. I've uninstalled it, and that didn't make any difference.
I've also tried removing anything in the registry left over from the old installs and that didn't help either.
Any suggestions?
CHeers, Angus

Key not valid for use in specified state - I do I fix this error when installing Adobe Reader

How can I install reader when I get this error: key not valid for use in specified state

That error is caused by a Windows Update. Make sure you have all subsequent updates installed.

When I try to install Adobe Acrobat XI Pro, I get an error message, "Key not valid for use in specified state". What is this?

When I try to install Adobe Acrobat XI Pro, I get an error message, "Key not valid for use in specified state". What is this?

See if this post by turingtest2 fixes it : key not valid for use in specified state

Key not valid for use in specified state.

Hi. Muse update to 2014.1 will not install, so I uninstalled Muse 2014 and tried again and again, no luck. However, I just updated InDesign and Premiere Pro successfully.
Thank you for any tips.
Error log is as follows:
"Payload: Muse CC (2014.1) 2014.1.0.375 Muse_2014_1_CC_LS24.msi_2014.1.0.375 -----------
ERROR: Key not valid for use in specified state.
ERROR: Install MSI payload failed with error: 1603 - Fatal error during installation.
MSI Error message: Key not valid for use in specified state.
ERROR: Third party payload installer Muse_2014_1_CC_LS24.msi failed with exit code: 1603

I solved the problem by restarting the computer and logging in to an administrator account. Then I was able to install Muse 2014.1
Perhaps, if this makes any sense technically, one part of the install process touched a nerve with a component in the process that required admin privileges that my day-to-day account was denying?
I hope it helps others - and I see there are a few having this problem.
Again, many thanks for your support, kglad.

"key not valid for use in specified state" when installing itunes

I recently uninstalled an older version of itunes, and every time i try to install the newest version it wont work.
I just keep getting the message "key not valid for use in specified state". If you know what to do could you
please make it simple. also do not send me to apple's help section, it does not have ANY answers.
thanks.

For "Key not valid for use in specified state" errors try moving the folder RSA from C:\Users\<User>\AppData\Roaming\Microsoft\Crypto\RSA to say C:\RSA (just in case there should be a need to restore it) then try installing again. This folder appears to act as a cache and should be rebuilt automatically as required.
There is a link to 7-zip in the Install missing components section of the user tip Troubleshooting issues with iTunes for Windows updates, but if you have the key not valid error the advice above should work, and there is no need to break down the setup file.
tt2

Key not valid for use in specified state error message

I did the update for my iPhone and also tried to update iTunes. I kept getting an error message of "key not valid for use in specified state" error message. I thought that if I uninstalled iTunes and re-installed it, that it would be fine. I'm still getting the message and now I don't have iTunes. When my phone updated, I couldn't download anything/backup my phone to iTunes. Please help. Thank you in advance.

For "Key not valid for use in specified state" errors try moving the folder RSA from C:\Users\<User>\AppData\Roaming\Microsoft\Crypto\RSA to say C:\RSA (just in case there should be a need to restore it) then try installing again. This folder appears to act as a cache and should be rebuilt automatically as required.
For further problems installing iTunes see Troubleshooting issues with iTunes for Windows updates.
tt2

Reinstalling,APSE11,from,original,CD,with,serial,number,,I,get,the,message,"Key,not,valid, for,use,in,specified,state."

While reinstalling APSE 11 (windows) from original CD (with serial number), I get the message "Key not valid for use in specified state." What do I do?

Unfortunately, you're in the wrong forum. This is not the Elements forum.
Here's the link to the forum you want:
https://forums.adobe.com/community/photoshop_elements/content

Cryptographic exception in sharepoint - key not valid for use

Similar Messages

Maybe you are looking for