Failed to decrypt protected XML node "DTS:Password" with error 0x8009000B "Key not valid for use in specified state

we have developed packages to do the followings
Extract data from DB2 Source and put it in MS Sql Server 2008 database (Lets Say DatabaseA).From MS Sql Server 2008 (DatabaseA)
we will process the data and place it in another database MS Sql Server 2008 (DatabaseB)
We have created packages in BIDS..We created datasource connection in Datasource folder in BIDS..Which has DB2 Connection and both Ms Sql Server connection (Windows authentication-Let
say its pointing to the server -ServerA which has DatabaseA and DatabaseB).The datasource connections will be used in packages during development.
For deployment we have created Package Configuration which will have both DB2 Connection and MS SqlServer connection in the config
We deployed the packages in different MS SqlServer by changing the connectionstring in the config for DB2 and MS SqlServer...
While runing the package we are getting the following error message
Code: 0xC0016016 Source: Description: Failed to decrypt protected XML node "DTS:Password" with error 0x8009000B "Key not valid for
use in specified state.". You may not be authorized to access this information. This error occurs when there is a cryptographic error. Verify that the correct key is available.
ilikemicrosoft

Hi Surendiran,
This is because the package has been created by somebody else and the package is being deployed under sombody else's account. e.g. If you are the creator then the package is encryption set according to your account and the package setup in SQL server is
under a different user account.
This happens because the package protection level is set to EncryptSensitiveWithUserKey which encrypts
sensitive information using creator's account name.
As a solution:
Either you have to set up the package in SQL server under your account (which some infrastructures do not allow).
OR
Set the package property Protection Level to "DontSaveSensitive" and add a configuration file
to the package and set the initial values for all the variables and all the connection manager in that configuration file (which might be tedious of-course).
OR
The third options (which I like do) is to open the package file and delete the password encryption entries from the package. Do note that this is not supported by designer and every time you make changes to the connection managers these encryption entries come
back.
Hope this helps.
Please mark the post as answered if it answers your question

Similar Messages

Failed to decrypt protected XML node "DTS:Password" with error 0x8009000B

Hi,
I have developed several SSIS packages with the last Beta of VS2005 / SQL Server CTP. After the public release I tried to uninstall the CTP-Versions to install the msdn finals but this time I got lost and was not able to satisfy the requirements of the final setup of VS2005. So I decided to install the whole pc again and after some hours I had a clean machine (XP with latest SQL Server 2005 Standard and VS2005 Professional). Now I have tried to open my SSIS-Project but getting the following error: Error loading ImpNetqNewsRss.dtsx: Failed to decrypt protected XML node "DTS:Password" with error 0x8009000B "Schlüssel ist im angegebenen Status nicht gültig.". You may not be authorized to access this information. This error occurs when there is a cryptographic error. Verify that the correct key is available.
After some “googleing” I found this thread: http://forums.microsoft.com/msdn/showpost.aspx?postid=22739&siteid=1 If I’m right the solution should be to use a Package Password, but I can’t figure out where I have to go enter/change a password. I even can’t remember I that ever used a password on my old installation for a dtsx-package?? Any help is welcome… Regards, Dirk

Let's Say your package name is MyPackage
In Visual Studio Go to Control Flow Tab.
Righ Click on an empty area inside the window not clicking "Data Flow Component" . pop up menu click the the properties to get to the properties window of MyPackage package.
Under the Security Area -> You will see
        ProtectionLevel              -- Change that to EncryptSensitiveWithPassword
        PackagePassword          -- enter password-> temp
This should do the trick however to be sure:
Below you will connection managers:
Database Connections (if more than one preform on all)
Double Click your connection to get the property pages. Click "ALL" under the Connection Link on Left Side. Scroll Down to Security Area.
  Provide the followings:
   Password (for the sql userid being used)
   Persist Security Info = True
Save the Package and connect to SQL Integration Srvices in SQL Manager (To Server e.g; DBServer (Integration Services)
Stored Packages -> MSDB --> Right Click --> choose Import Package
in the property dialog box
              Package Location :   File System
              Package Path -- Choose the location of your dtsx file.  (MyPackage.dtsx)
  Leave everything default.
Click OK.
  Dialog box will appear asking for the Package Password
Provide the password-> temp
You have successfully imported the package called MyPackage.
In order to create a job.
In the job Step->
       Type: SQL Server Integration Services Package
       In the General Tab:
                 Package Source : SSIS Package Store
                 Server : DBServer (Where we stored our package above)
    Click the button for the package: Choose your package (MyPackage)
   Click OK :
    It will ask the package password again : temp
                Package has successfully been loaded to Job Step. Now you can schedule and do a test run on the job.
Thanks for the patience of reading for those who are expert.
- Azhar

- 0 fatal error(s), 3 error(s) ----------- Payload: Adobe Photoshop Lightroom 5 5.6.0.0 Adobe_Lightroom_x64.msi_5.6 ----------- ERROR: Key not valid for use in specified state. ERROR: Install MSI payload failed with error: 1603 - Fatal error durin

I keep getting this error code when trying to download
- 0 fatal error(s), 3 error(s) ----------- Payload: Adobe Photoshop Lightroom 5 5.6.0.0 Adobe_Lightroom_x64.msi_5.6 ----------- ERROR: Key not valid for use in specified state. ERROR: Install MSI payload failed with error: 1603 - Fatal error during installation. MSI Error message: Key not valid for use in specified state. ERROR: Third party payload installer Adobe_Lightroom_x64.msi failed with exit code: 1603

Generally this error happens because of an encrypted folder or insufficient permissions on that folder: http://support.microsoft.com/kb/834484 (MS Explanation)
Adobe has a page here: Error 1603: A fatal error occurred during installation

SQL Server Agent Failed to decrypt protected XML node

I'm getting the below error when trying to run sql server agent to run an SSIS package. I've updated folder security to allow sql server agent access, but cannot get the package to execute within SQL Management Studio. The package runs find in SSIS.
11.0.2100.60 for 64-bit Copyright (C) Microsoft Corporation. All rights reserved. Started: 12:12:00 PM Error: 2014-11-30 12:12:02.65 Code: 0xC0016016 Source: LoadStgProspects Description:
Failed to decrypt protected XML node "DTS:Password" with error 0x8009000B "Key not valid for use in specified state.". You may not be authorized to access this information. This error occurs when there is a cryptographic error. Verify that
the correct key is available. End Error Error: 2014-11-30 12:12:03.88 Code: 0xC0016016 Source: LoadStgProspects Description: Failed to decrypt protected XML node "DTS:Password" with error
0x8009000B "Key not valid for use in specified state.". You may not be authorized to access this information. This error occurs when there is a cryptographic error. Verify that the correct key is available. End Error Error: 2014-11-30
12:12:04.74 Code: 0xC0209303 Source: LoadStgProspects Connection manager "Excel Connection Manager" Description: The requested OLE DB provider Microsoft.Jet.OLEDB.4.0 is not registered. If the 64-bit driver
is not installed<c/> run the package in 32-bit mode. Error code: 0x00000000. An OLE DB record is available. Source: "Microsoft OLE DB Service Components" Hresult: 0x80040154 Description: "Class not registered".
End Error Error: 2014-11-30 12:12:04.74 Code: 0xC020801C Source: Load prospect files Prospect xls [231] Description: SSIS Error Code DTS_E_CANNOTACQUIRECONNECTIONFROMCONNECTIONMANAGER. The AcquireConnection
method call to the connection manager "Excel Connection Manager" failed with error code 0xC0209303. There may be error messages posted before this with more information on why the AcquireConnection method call failed. End Error Error:
2014-11-30 12:12:04.74 Code: 0xC0047017 Source: Load prospect files SSIS.Pipeline Description: Prospect xls failed validation and returned error code 0xC020801C. End Error Error: 2014-11-30 12:12:04.74
Code: 0xC004700C Source: Load prospect files SSIS.Pipeline Description: One or more component failed validation. End Error Error: 2014-11-30 12:12:04.74 Code: 0xC0024107 Source:
Load prospect files Description: There were errors during task validation. End Error Error: 2014-11-30 12:12:04.74 Code: 0xC00220DE Source: LoadStgProspects Description: Error
0xC0012050 while loading package file "C:\Users\Jim\Documents\Visual Studio 2010\Projects\SSISTraining\SSISTraining\LoadStgProspects.dtsx". Package failed validation from the ExecutePackage task. The package cannot run. . End Error DTExec:
The package execution returned DTSER_FAILURE (1). Started: 12:12:00 PM Finished: 12:12:04 PM Elapsed: 4.337 seconds. The package execution failed. The step failed.,00:00:04,0,0,,,,0

Hi selfdestruct80,
According to your description, you created SSIS package and it works fine. But you got the error message when the SSIS package was called from a SQL Server Agent job.
According to my knowledge, the package may not run in the following scenarios:
The current user cannot decrypt secrets from the package.
A SQL Server connection that uses integrated security fails because the current user does not have the required permissions.
File access fails because the current user does not have the required permissions to write to the file share that the connection manager accesses.
A registry-based SSIS package configuration uses the HKEY_CURRENT_USER registry keys. The HKEY_CURRENT_USER registry keys are user-specific.
A task or a connection manager requires that the current user account has correct permissions.
According to the error message, the SSIS Package ProtectionLevel property to EncryptSensitiveWithPassword as ArthurZ mentioned. To solve the problem, you need to go to Command Line tab, manually specify the paassword in SQL Agent Job with the command like below:
/FILE "\"C:\Users\xxxx\Documents\SQL Server Management Studio\SSIS\Package.dtsx\"" /DECRYPT somepassword /CHECKPOINTING OFF /REPORTING E
If you have any more questions, please feel free to ask.
Thanks,
Wendy Fu
Wendy Fu
TechNet Community Support

Outlook 2013 - Password change breaks S/MIME Certs "An error occurred in the underlying security system. Key not valid for us in specified state."

AD password change comes up, user changes password.
Tries to send signed or encrypted email with a Comodo S/MIME certificate, and gets the following error:
""An error occurred in the underlying security system. Key not valid for us in specified state."
I now have two reports of this error - one on Windows 7, and one on Windows 8.0 (remote user).
The one on Windows 8.0, we tried removing their S/MIME cert from Outlook/Windows and re-adding, this did NOT resolve the issue.
Plan was originally to have the 8.0 user ship their machine in, and wipe it, since nothing else could fix it and I wasn't finding anyone else with the same issue. Now that I've got a second user with the same issue, its looking like a bug/issue and
not a random glitch.
Thanks in advance for any and all help with this!

Hi,
Thank you for your question.
I am trying to involve someone familiar with this topic to further look at this issue.
Thanks,
Melon Chen
Forum Support
Come back and mark the replies as answers if they help and unmark them if they provide no help.
If you have any feedback on our support, please click
here

WLAN driver fails to install on G580 Windows 7 x64 with error "BCM4313: Can not find setup file"

Summary:
I have installed Windows 7 Ultimate x64 on my G580. Everything is working fine except the WLAN driver fails to install with the error "BCM4313: Can not find setup file".
Details:
I bought lenovo G580 with Windows 8. Since my parents are not comfortable with the learning curve of Win 8, I successfully downgraded to Windows 7 Ultimate x64. Everything is working fine but my WLAN card is not recognized because of lack of driver.
The lenovo parts look-up page says I have broadcom WLAN card - CBT BCM4313 MOW HMC WLAN
I looked at lenovo driver downloads site and tried following driver files for Windows 7 and both of them failed to install with the following error. I tried installing other WLAN drivers also but they won't even install as required hardward is not there.
Error - "BCM4313: Can not find setup file"
Drivers Tried:
- http://support.lenovo.com/en_US/downloads/detail.page?DocID=DS028105
- http://support.lenovo.com/en_US/downloads/detail.page?DocID=DS028208
Any help about how to get past this error will be appreciated. The previous Widnows verison (Windows 8) is still on my hard-drive as windows.old folder. Let me know if I can copy a specific file from there.
Thank you.
BJS
Solved!
Go to Solution.

Download this driver bcm4313
Start setup and extract the files.After that go to star menu/control panel/system/device manager.There you probably find out that network adapter driver is missing.Choose it and click with right mb for drop menu to show up.Select properties then Driver/Update Drivers...Select to load driver from computer hard drive and choose the path where extract files is.Default path is main partion C: and search for directory named Driver.
And yes...you get "Can not find setup file" error but dont worry.Files needed to instal driver are extract fine.

Quicktime would fail to write/export to server windows share with "Error -43: file not found" errors

Summary:
With the combination of Windows 7 and Quicktime 7.x, Quicktime would fail to write/export to server windows share with "Couldn't create output movie storage" and "Error -43: file not found" errors
Steps to Reproduce:
Trying to render to Quicktime files using network shared folders as a destination:
Unable to open file. (-1610153459)
The funny thing: it only happens when there are at least two shared folders mapped on the workstation, and the destination folder used for the rendered movie is not the first one.
If we have only two mapped drives, F: and G: for example, and we try to render something to F:, everything works fine and no error is showed. But, when the destination is the G: drive, rendering never works, the error is showed, but a zero-byte file is created in F: (!!). ODD! If we remap F: drive with a different letter, but a letter BEFORE G:, the problem always happens. If we remap drive F: to any letter AFTER G:, making G: the first available network drive, rendering works. Also, simply unmapping F: and leaving G: as the only connected network folder makes render to work.
We do not have a D: drive in our Windows 7 workstations, they are all C: only.
It is a 100% reproducible problem. We tried with three different Active Directory networks and workstations. It has all of the features of a software bug.
Any help would be appreciated.
Cheers!
Expected Results:
Error -43: file not found
Actual Results:
The workaround seems to be to use the full path to the servers instead of the mapped mount point (ie //server/z/... instead of Z:/...
Regression:
All versions of quicktime 7 in combination with windows 7 client and more than one smb share point mapped in a letter.
Notes:
All software that uses quicktime movie exports showed this error.

Not sure what file your are referencing? Thanks for your suggestion, however, it's not relavant.
It renders fine if you render to either the UNC path or the first mapped drive.
i.e. If you have two mapped drives G: and H:
they both point to \\fileserver\share1\folder
If you render to H: it will fail, if you render to G: it works! Same path, same user, same permissions.
The only difference is H comes after G, so it fails... BUG. If it was to do with anything else, underscores, permissions etc, it would fail on both.

XML Parser Message: Element series is not valid for the content model

Hello,
I work with FrameMaker 8 and DITA.
I change the element prodinfo in the topic.edd from:
General rule: (prodname), (vrmlist), (brand | series | platform | prognum | featnum | component)*
to:
General rule: (brand | series | platform | component)*
When I import the element definition to the template everything is okay.
When I insert the elements metadata, prodinfo, brand, series, platform and component into a topic I get the XML Parser Message that the element brand is not valid for the content model (prodname,vrmlist, ((brand|series|platform|prognum|featnum|component))*).
When I delete the element brand in the topic I get the XML Parser Message that the element series is not valid for the content model (prodname,vrmlist, ((brand|series|platform|prognum|featnum|component))*).
I change the element prodinfo in the topic.edd to:
General rule: (brand)?, (series)?, (platform)?, (component)?
...and get the same Parser Message.
I do not understand that. Is not it allowed to change the EDD this way without changing the DTD?
With kind regards
Nina

Hi Nina... In general, the EDD and DTD need to sync up. You can remove elements from an EDD element definition's general rule, as long as the resulting elements are still valid to the DTD. But if changing a general rule creates an invalid structure, you'll need to also change the DTD to allow the revised structure. With DITA, it is common to remove inline elements from block-level elements. For example, you might want to remove the <msgblock>, <msgnum>, and <msgph> elements from the general rule of the element .. this can be done easily in the EDD and the resulting structure remains valid with the DTD. However, what you're doing leaves the <brand> element as a child of <prodinfo> .. which is invalid. You'll get these errors when saving a file, since this is when the file is validated against the DTD. I do not recommend modifying the structure in such a way that requires you to modify the DTD. If you really need to do this, then you should consider making a specialization to support your revised model. I hope this helps. Cheers and Happy New Year! ...scott

DAG - Backup failing on 1 DB only with error - The Microsoft Exchange Replication service VSS Writer instance ID failed with error code 80070020 when preparing for a backup of database 'DB012'

Hi Board,
i´ve search across the board, technet and symantec sites but did not found a hint about my problem.
we drive a 2 node DAG (Location1-Ex1-mb1
Location2-exc1-mb1), on SP2 RU4 patchlevel with 40 Databases.
Since some time the backup of one - and only one DB - is failing with these events, logged on the Mailboxserver on which the passive DB is hosted.
Log Name:      Application
Source:        MSExchangeRepl
Date:          28.09.2012 00:37:17
Event ID:      2112
Task Category: Exchange VSS Writer
Level:         Error
Keywords:      Classic
User:          N/A
Computer:      Location1-Exc1-MB1
Description: The Microsoft Exchange Replication service VSS Writer instance 1ab7d204-609a-4aea-b0a7-70afb0db38de failed with error code 80070020 when preparing for a backup of database 'DB012'.
Followed by
Log Name:      Application
Source:        MSExchangeRepl
Date:
01.10.2012 03:33:06
Event ID:      2024
Task Category: Exchange VSS Writer
Level:         Error
Keywords:      Classic
User:
N/A
Computer:      Location1-Exc1-MB1
Description:
The Microsoft Exchange Replication service VSS Writer (Instance 42916d80-36c1-4f73-86d0-596d30226349) failed with error 80070020 when preparing for a backup.
The backup Application - Symantec Backup Exec 2010 R3 – states, this error
Snapshot provider error (0xE000FED1): A failure occurred querying the Writer status.
Check the Windows Event Viewer for details.
Writer Name: Exchange Server, Writer ID: {76FE1AC4-15F7-4BCD-987E-8E1ACB462FB7}, Last error: The VSS Writer failed, but the operation can be retried (0x800423f3), State: Stable (1).
Symatec suggests within http://www.symantec.com/business/support/index?page=content&id=TECH184095
to restart the MS Exchange Replication Service – BUT the mentioned eventID
8229 isn´t present on any of the both Mailboxservers.
The affected Database is active on Location2-Exc1-Mb1 Server and in an overall healthy state. I found during my research, that below Location2-Exc1-Mb1 Server, there are not removed shadow copies present!
This confuses me, since all Backups are normally taken from the passive copy of a Database.
So my questions to the board are:
* Does anyone is facing similar issues?
* Can someone explain why snapshots are present on the Mailboxserver hosting the Active Database, whilst the errors are logged on the passive one?
-          * Does someone know the conditions, why shadows copies remain and
aren´t removed in a proper manner?
What can cause the circumstance, that only 1 DB is facing such issues?
Any suggestion is welcome!
BR
Markus

Hi Lenora,
I´ve encreases VSS / Exchange Backup Log levels to expert, before starting
those things i´ve all tried now:
- Backup from passive DB (forced within Symantec Backup Exec)
- Backup from active DB (forced within Symantec Backup Exec)
- Backup from passive DB without GRT enabled (forced within Symantec Backup Exec)
- Backup from active DB without GRT enabled(forced within Symantec Backup Exec)
All those attempts failed.
But brought some more details - the backup against the active DB states, that there is still a backup in progress and therefore this backup is cancelled by VSS.
The Solution was, that i´ve needed to restart the Exchange Replication Service on the Mailbox Server hosting the passive DB.
Backups are working again on all DBs!
THX for your replys.
Best regards
Markus

I have a new email address and updated it with my apple id/icloud and updated on my iPhone, but i'm getting a pop up to enter my password with my old email address listed for iCloud/Apple id.

I have a new email address and updated my apple id/icloud with the new address. I updated on my iPhone, but i'm keep getting a pop up to enter my password with my old email address listed for iCloud/Apple id. How do I get it to go away?

Did you create a NEW Apple ID or did you change the email address for your OLD Apple ID? This will affect how you update apps in the future.
Anyway, go to Settings/iTunes&App Stores, log out, then log in with the new ID.

Analytical Services failed to get user's parent group tree with Error

Hi,
We have a frequent errror during our weekly batch for an application.
The context:
- Essbase Administration Services we are using is version is 9.3.1.
- 8 applications are calculated during the week-end. The scripts executed are exactly the same for the 8 applications.
- For example let's say that 5 scripts are launched during the night in the batch for each application (script 1, script 2 ... script 5)
- App1 and App2 are launched alone and before the 6 others applications as these applications database are 3 x bigger (App1 is calculated alone, then app2 is calculated alone, then app3 to app8 scripts are launched in the same time).
The issue :
- We don't see any issue for app3 to app8, the calculation are executed without any problem from script1 to script5.
- But we have an error in App1 and App2 log when the bath execute script 4 and we see the following error in the server log **
"Analytical Services failed to get user's parent group tree with Error".
(** : we don't see any log for script 4 in the application log - it's like the server bypass script 4 to go directly from script 3 to script 5 )
Nothing special is done in script 4 but just an aggregation of the Year dimension (using a @SUM(@RELATIVE(Year,0)) calculation.
I think that there is may be a synchronization error with Shared Services but what is strange is that it's always for the same script 4 and the batch is launched at different time every week-end.
Can the issue be linked to the size of the database of applications (8 Gb) and difficulties for the processor to executes aggregation in a large database volume ?

Hi,
According to your description, my understanding is that the error occurred when sending an email to the user in workflow.
Did you delete the existing Connections before setting NetBiosDomainNamesEnabled?
If not, I recommend to delete and recreate your AD connections, then set NetBiosDomainNamesEnabled to true.
Or you can delete the original User Profile Service Application and create a new one, then set the NetBiosDomainNamesEnabled to true and start the User Profile Service Application
synchronization.
More reference:
http://social.technet.microsoft.com/wiki/contents/articles/18060.sharepoint-20xx-what-if-the-domain-netbios-name-is-different-than-the-fqdn-of-the-domain-with-user-profile.aspx
Best regards.
Thanks
Victoria Xia
TechNet Community Support

Job failed with error tempdb is not available

HI All,
Backup job failed with error 'Unable to determine if the owner () of job backup_all_user_db_full has server access (reason: The log for database 'tempdb' is not available. [SQLSTATE HY000] (Error 9001)).'
I checked in errorlog
LogWriter: Operating system error 1784(The supplied user buffer is not valid for the requested operation.) encountered.
    Write error during log flush. Shutting down server
2014-09-09 07:46:25.90 spid52    Error: 9001, Severity: 21, State: 1
2014-09-09 07:46:25.90 spid52    The log for database 'tempdb' is not available..
2014-09-09 07:46:25.92 spid51    Error: 9001, Severity: 21, State: 1
Can anyone suggest to why it is happening

From the error message, it looks like the drive on which the tempdb log file is residing is having issues.
Please involve your storage admin to look into the disk subsystem

Apple iPAD 2. Needs password to unlock iPAD; however there is a permanent keyboard displayed on the screen that does not respond to touch. iPAD switches on with button but does not turn off using it at moment. Can you help please?

Apple iPAD 2. Needs password to unlock iPAD; however there is a permanent keyboard displayed on the screen that does not respond to touch. iPAD switches on with button but does not turn off using it at moment. Can you help please?

Try a reboot by holding both the power and home buttons until the apple logo appears, ignore the red slider if that appears. See if that clears the glitch.

Flash CS 6 error: CreateWinProcess failed with error 2 - The system cannot find the file specified

Hi,
I'm getting the error "CreateWinProcess failed with error 2 - The system cannot find the file specified" whenever I try to test an Air app within the Flash IDE.
This error even comes up with a new and empty project .fla file. I already updated the Air runtime and Flash to the latest version.
How to fix this problem? Any ideas welcome!
Thank you.

I installed the update, but I'm sorry to say that it did not solve the problem
The error is still there as described by Master §ix and Daniel777
CreateWinProcess failed with error 2. The system cannot find the file specified.
It happens when trying to test, debug, or publish air applications (AIR 2.5 – AIR 3.4 , desktop, android, iOS)
In this case, I can't use the simulator to test the applications,
thanks

One user unable to login to OWA - error :" The user name or password that you entered is not valid. Try entering it again." exchange 2007 SP3

Hello Guys,
exchange 2007 SP3
windows 2008 r2
we have one user who unable to login to owa with error -"The user name or password that you entered is not valid. Try entering it again."
we checked mailbox feature in EMC and owa is enable
checked adsiedit - looks good
we checked allow inheritance - checked
we reset the password and try to login to owa from exchange server , no luck
user can login to her computer and outlook without any issue
we also moved her mailbox to another server
user facing the same issue from office and VPN
any suggestion ?
Thanks
Sandip
sandip

Hello Lynn
thanks for the reply. but I already checked that and allow inheritance already checked .
when user unable to access webmail with error "The user name or password that you entered is not valid"
will it generate any event id on exchange server or domain controller ?
in our case we have mailbox and CAS on different servers
any suggestion .
Regards
Sandip
sandip

Failed to decrypt protected XML node "DTS:Password" with error 0x8009000B "Key not valid for use in specified state

Similar Messages

Maybe you are looking for