Issue(s)

You find the following error in the Authentication Service log, or any other log file:

Cause(s)

• The CoreOne Authentication Services - and other components - stores certain values encrypted in the database. The service tries to de-crypt the value and has an error.

• The stored value is corrupt. This can have multiple causes:

  • As described in https://itsense.atlassian.net/l/cp/Nb7xfXaq, a windows in place upgrade changed the machine key (more likely in the application service)

  • A data restore, transfer or manual mutation corrupted the entry

    • Note: Transferring encrypted values form one system to another system will not work as they are encrypted with different random bytes!

Solution

Depending on what value was corrupted, you can either enter the value again in the Admin UI or try a specific fix:

• Signing Certificates

  • If the entries in table servicecorelogin_service_provider_signing_certificates are corrupted, you can truncate the table

  • Each time the certificates are requested, they are regenerated from the configured certificate from the servicecorelogin_service_provider table