"DynamicOps.Common.Exceptions.EncryptionException: Cannot re-encrypt the database. Correct the errors above and rerun the tool." error while migrating from vRA 6.2.x to vRA 7.x
search cancel

"DynamicOps.Common.Exceptions.EncryptionException: Cannot re-encrypt the database. Correct the errors above and rerun the tool." error while migrating from vRA 6.2.x to vRA 7.x

book

Article ID: 345526

calendar_today

Updated On:

Products

VMware

Issue/Introduction

Symptoms:
  • During the IaaS part of the migration from vRealize Automation 6.2.x to 7.x, where the IaaS Web Server and Model Manager Server components are running on an operating that is using Windows Management Framework 5.x, or more commonly known as PowerShell 5.x, the migration fails.
  • In the IaaS migration log file on the model manager data node located at <drive>:\Program Files (x86)\VMware\vCAC\InstallLogs-<timestamp>\migrate.log file,

    DynamicOps.Common.Exceptions.EncryptionException: Cannot re-encrypt the database. Correct the errors above and rerun the tool.
    DynamicOps.Tools.EncryptionKeyTool.exe Error: 0 : Cannot re-encrypt value [xxx] The input is not a valid Base-64 string as it contains a non-base 64 character, more than two padding characters, or an illegal character among the padding characters.


Cause

This issue occurs due to the incorrect handling of how Windows Management Framework 5.x passes in the DynamicOps.Tools.EncryptionKeyTool.exe parameters compared to earlier versions of Windows Management Framework, specifically around the encryption key parameter, which is used to re-encypt the data on the target environment's database.

Resolution

This issue is resolved in VMware vRealize Automation 7.3, available at VMware Downloads.


Workaround:
To work around this issue in vRealize Automation 7.2, apply the hotfix attached in this article.

Note: This hotfix is applicable for vRA 7.2 version only.
  1. Download the attached 2149877_Hotfix.zip file.
  2. Extract the zip file. You receive the below files upon extracting it.
    • readme.txt
    • vRA-IaaS-Migration.zip
  3. Copy vRA-IaaS-Migration.zip to the below location on target vRA 7.2 virtual appliance:

    /opt/vmware/share/htdocs/service/iaas/download
     
Note: Do not extract the content of the package vRA-IaaS-Migration.zip.

Attachments

2149877_Hotfix.zip get_app