Enterprise Console: ExportPrivateStore utility generates 'ERROR: key not valid for use in specified state.'

  • N.º del artículo: 111415
  • Actualizado: 09 may 2014

For background information on the ExportPrivateStore utility refer to the Knowledgebase article What is sec_eps_45_sfx.exe (ExportPrivateStore.exe).

Issue 

When running the Upgrade Advisor on a Windows 2000 server as part of the migration the private certificates will need to be exported and then imported to the new server before installing Enterprise Console v 4.5 (SEC4.5).When the utility is run ExportPrivateStore the following error occurs:

ERROR: key not valid for use in specified state.
at System.Security.Cryptography.ProtectedData.Unprotect(Byte[ ] encryptedData,Byte [ ] optionalEntropy, DataProtectionScope scopt)
at Sophos.Management.Tools.ExportPrivateStore.Utils.LoadPrivateStore(Boolean includeSyncSettings)
at Sophos.Management.Tools.ExportPrivateStore.Utils.Export(FileInfo fileInfo, Boolean includeSyncSettings)
at Sophos.Management.Tools.ExportPrivateStore.Utils.Program.Main(String [ ] arguments)

First seen in

Enterprise Console

What To Do

Upgrade Advisor - Note If you are at the stage called "Back up security certificates from the old SEC server" in the Upgrade Advisor guide follow the section "Export the Private Store", if you are at the section called "Restore security certificates to the new SEC server" then follow the section"Import the Private Store" below.

1. Export the Private Store On the current (old) server with SEC
  1. Download Pstools.zip : http://technet.microsoft.com/en-us/sysinternals/bb897553.aspx
  2. Extract Pstools.zip to C:\Pstools\
  3. Place Psexec.exe (from C:\Pstools\) into C:\sec_45\tools\
  4. Run the following command line in the C:\sec_45\tools\ folder:
    psexec -s c:\sec_45\tools\exportprivatestore.exe -s -e sec4_private_backup
    (This will backup the current private store data to sec4_private_backup)
2. Import the Private Store On the new server with SEC4 or SEC45
  1. Download Pstools.zip : http://technet.microsoft.com/en-us/sysinternals/bb897553.aspx
  2. Extract Pstools.zip to C:\Pstools\
  3. Place Psexec.exe (from C:\Pstools\) into C:\sec_45\tools\
  4. Copy sec4_private_backup from the old server to C:\sec_45\tools\ on the new server
  5. Run the following command line in the C:\sec_45\tools\ folder:
    psexec -s c:\sec_45\tools\exportprivatestore.exe -d
    (This will delete the current privatestore data, press Y to confirm)
  6. Now run the following:
    psexec -s c:\sec_45\tools\exportPrivateStore -s -I sec4_private_backup
    (This will import the old server private store on to the new server installation)
Download Link http://www.sophos.com/en-us/support/downloads/console/sophos-enterprise-console/export-private-store.aspx

 
Si necesita más ayuda, póngase en contacto con soporte técnico.

Valore el artículo

Muy malo Excelente

Comentarios