3

I have a single 2008 ssrs instance (#1) up and running and need to add a 2nd server also running ssrs 2008 (#2). The error message on the 2nd server is:

The report server cannot decrypt the symmetric key that is used to access sensitive or encrypted data in a report server database. You must either restore a backup key or delete all encrypted content.

Searching on that error, I find plenty of links and posts about backing up and restoring keys, but that seems to move the problem from server #2 to server #1. Server #2 will start working, but #1 will get the same error.

I found this regarding rskeymgmt.exe , but that seems to have no impact. The rskeymvmt command reports 'success', but even after restarting both instances of ssrs on each machine, nothing changes.

I have also attempted to follow these steps, but my #2 instance never shows up in the scale-out deployment tab in the configuration manager.

Any suggestions?

Roger
  • 133
  • 2

1 Answers1

3

I work with Roger and the issue turned out to be after a little work that the second server was a cloned image that had been OBEd so it was a "different" server from the server SID and identity. However, the install of SQL 2008R2 SSRS was already on the server. The SSRS install creates a unique InstallationID (GUID) and this is used to identify the SSRS instance in a scale out of SSRS. So both servers have the same InstallationID and that means they both appear to be the same server and thus the key is the same for both and it cannot backup or restore the key since it conflicts with an existing key in dbo.keys in ReportServer DB. The InstallationID can be found in rsreportserver.config file, it will also be in the registry in many, many locations and trying to find and fix them is not a feasible choice.

The solution is to remove and then re-install the SSRS instance on the second server so that it will have a new InstallationID and crypto key. Then it can be added to scale out installation.

Brian ODwyer
  • 46
  • 3