Troubleshooting
Problem
When the ReEncrypt process fails, it can be confusing how to fix the problem.
Cause
![manage maxinst yaml](/support/pages/system/files/inline-images/manage-maxinst-yaml_0.png)
When you get this error, the reencrypt process was unable to decrypt the values found in the database.
The ansible log contain a message like this:
TASK [report failed reencrypt Result] ********************************
[0;32mok: [localhost] => {[0m
[0;32m "msg": "Unable to reencrypt the database. If the database uses unique encryption keys they should be in the secret named masdev-manage-encryptionsecret, in MXE_SECURITY_CRYPTO_KEY and MXE_SECURITY_CRYPTOX_KEY. Otherwise these keys should not be in the secret."[0m
[0;32m}[0m
[0;32mok: [localhost] => {[0m
[0;32m "msg": "Unable to reencrypt the database. If the database uses unique encryption keys they should be in the secret named masdev-manage-encryptionsecret, in MXE_SECURITY_CRYPTO_KEY and MXE_SECURITY_CRYPTOX_KEY. Otherwise these keys should not be in the secret."[0m
[0;32m}[0m
TASK [check reencrypt Result] ********************************
[0;31mfatal: [localhost]: FAILED! => {[0m
[0;31m "msg": "Checking reencrypt result"[0m
[0;31m}[0m
[0;31mfatal: [localhost]: FAILED! => {[0m
[0;31m "msg": "Checking reencrypt result"[0m
[0;31m}[0m
Resolving The Problem
The reencrypt process uses the values from the encryption secret. The value for MXE_SECURITY_OLD_CRYPTO_KEY is used to decrypt the value while the value for MXE_SECURITY_CRYPTO_KEY is used to encrypt the value. If the OLD value isn't the value the database was encrypted with, the decryption will fail.
If the Maximo database was never given a specific encryption key, then it was encrypted with Maximo's default encryption. In this case, MXE_SECURITY_OLD_CRYPTO_KEY should have no value or not be in the secret.
Document Location
Worldwide
[{"Type":"SW","Line of Business":{"code":"LOB59","label":"Sustainability Software"},"Business Unit":{"code":"BU059","label":"IBM Software w\/o TPS"},"Product":{"code":"SSRHPA","label":"IBM Maximo Application Suite"},"ARM Category":[{"code":"a8m3p000000hAeaAAE","label":"Maximo Application Suite->Manage"}],"ARM Case Number":"","Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"8.0.0"}]
Was this topic helpful?
Document Information
Modified date:
25 May 2021
UID
ibm16453473