The report server cannot access the private key for the service account.

Reporting Services Error

    The report server cannot access the private key for the service account. This key is used to decrypt the symmetric key that protects content in the report server database. This condition might occur after the password is reset for the report server service account. You must either restore a backup key or delete all encrypted content. (rsKeyStateNotValid) Get Online Help
        For more information about this error navigate to the report server on the local server machine, or enable remote errors


I have read over the other post regarding this error such as

http://www.experts-exchange.com/Microsoft/Development/MS-SQL-Server/MS-SQL_Reporting/Q_26322598.html


I have to ask though, as it sounds scary to loose all encrypted data, but what exactly is that data and can it be replaced?

I have a box i have had to take over and the person who set it up used the local Administrator account as the service account, but that password had to be reset to get into the box so now the Key is not working and i get the above error.

My concern is that if i delete this key to create a new one, what actual data could i lose?

Should i do a backup of data sources or anything else i could restore after?

I ran this query from stack to get the data sources and their names
http://stackoverflow.com/questions/9638431/listing-all-data-sources-and-their-dependencies-reports-items-etc-in-sql-ser
SELECT
    C2.Name AS Data_Source_Name,
    C.Name AS Dependent_Item_Name,
    C.Path AS Dependent_Item_Path
FROM
    ReportServer.dbo.DataSource AS DS
        INNER JOIN
    ReportServer.dbo.Catalog AS C
        ON
            DS.ItemID = C.ItemID
                AND
            DS.Link IN (SELECT ItemID FROM ReportServer.dbo.Catalog
                        WHERE Type = 5) --Type 5 identifies data sources
        FULL OUTER JOIN
    ReportServer.dbo.Catalog C2
        ON
            DS.Link = C2.ItemID
WHERE
    C2.Type = 5
ORDER BY
    C2.Name ASC,
    C.Name ASC;

Open in new window


I guess my concern is if i delete and re-create this key, i could cause even more damage. or will this not cause that sort of issue?

And yes, my MSSQL knowledge is limited (can you tell!), especially when it comes to Reporting Services and i am the only person who can do this.
LVL 2
MathiauAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

MathiauAuthor Commented:
you must redefine all data sources and subscriptions

This is what has me worried i guess
0
Nico BontenbalCommented:
This article from MS also describes what gets deleted when you delete the encryption key:
http://technet.microsoft.com/en-us/library/ms156010.aspx
It's in the part titled 'Deleting Unusable Encrypted Content'. So if you have all the information you need to recreate the data sources (server names, database names, passwords etc.) you won't have much trouble recreating them (unless you have a lot then it will take a lot of time).
If you want to make sure you are not going to make it worse you could migrate the report server to another machine (http://technet.microsoft.com/en-us/library/ms143724.aspx) and test it on that machine first.
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
MathiauAuthor Commented:
Well here is the good news!

I went in and reset the admin password back to an old one i had saved in my keepass, and tada! it works again so i made an immediate backup of the key

So, if you change the password by accident, but know the old one, change it back and you will get access again.

Appreciate the migration link, i may have to do that myself as we were just starting a project to move the reporting server to a new system.
0
MathiauAuthor Commented:
not only answered but provided links for further research.
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
SSRS

From novice to tech pro — start learning today.