我此刻已多次变动SQL Server 2005 Reporting Services的处事帐户,但昨天是我第一次碰着可骇的“报表处事器无法解密用于会见的对称密钥…”错误.
情形是SQL Server 2005企业版,作为定名实例安装在一个也默认行使SQL Server 2000 Standard Edition的框上.统统都是32位.
作为BOL recommends,我老是行使Reporting Services设置打点器举办变动,而且从未必需规复加密密钥.
可是,最近一次(它必需在出产中,不是吗?),处事帐户变动无法导入现有加密密钥;从ReportServerService日记文件:
ReportingServicesService!crypto!b!5/19/2009-17:20:37:: i INFO: Initializing crypto as user: ReportingServicesService!crypto!b!5/19/2009-17:20:37:: i INFO: Exporting public key ReportingServicesService!crypto!b!5/19/2009-17:20:37:: i INFO: Performing sku validation ReportingServicesService!crypto!b!5/19/2009-17:20:37:: i INFO: Importing existing encryption key ReportingServicesService!library!b!5/19/2009-17:20:37:: e ERROR: Throwing Microsoft.ReportingServices.Diagnostics.Utilities.ReportServerDisabledException: The report server cannot decrypt the symmetric key used to access sensitive or encrypted data in a report server database. You must either restore a backup key or delete all encrypted content. Check the documentation for more information.,; Info: Microsoft.ReportingServices.Diagnostics.Utilities.ReportServerDisabledException: The report server cannot decrypt the symmetric key used to access sensitive or encrypted data in a report server database. You must either restore a backup key or delete all encrypted content. Check the documentation for more information. —> System.Runtime.InteropServices.COMException (0x80090005): Bad Data. (Exception from HRESULT: 0x80090005) at System.Runtime.InteropServices.Marshal.ThrowExceptionForHRInternal(Int32 errorCode,IntPtr errorInfo)
at RSManagedCrypto.RSCrypto.ImportSymmetricKey(Byte[] symKeyBlob) at Microsoft.ReportingServices.Library.ConnectionManager.GetEncryptionKey() — End of inner exception stack trace —
此刻,我是一个很好的小DBA,我有一个早年的加密密钥的备份,以是我可以或许快速从题目中规复,可是,我想知道的是,为什么会产生? This article from MS suggests that it may happen,但我不喜好这是一个完全随机产生的提议.我已阅读,此刻遗憾地找不到链接,提议当您通过RS Configuration Manager(如SQL Server设置打点器或Windows处事)之外的其他方法变动Reporting Services的处事帐户时,会常常产生这种环境.
以是,我有两个题目:
>假如我凭证提议行使RS设置打点器,为什么会产生这种环境? (但它起浸染了,他叹息道!) >我是否应该不确定我当前的加密密钥是不是像往常一样基于呆板/当前处事帐户,而是基于早年的处事帐户?
办理要领
>当您行使其他处事帐户时,密钥应该失败
The Report Server service uses the symmetric key to access the encrypted data in a report server database. This symmetric key is encrypted by using an asymmetric public key that corresponds to the computer and the user account that is used to run the Report Server service. When you change the user account that is used to run the Report Server service,the report server cannot use the asymmetric public key to decrypt the symmetric key. Therefore,the Report Server service cannot use the symmetric key to access the data from the report server database
2.我只想用您当前的设置建设一个新的密钥备份 (编辑:湖南网)
【声明】本站内容均来自网络,其相关言论仅代表作者个人观点,不代表本站立场。若无意侵犯到您的权利,请及时与联系站长删除相关内容!
|