Knowledge Builders

how do i reset my ssrs encryption key

by Golda Welch Published 3 years ago Updated 2 years ago
image

Reporting Services Configuration Manager

  1. Launch Reporting Services Configuration Manager.
  2. Select Encryption Keys.
  3. Select Backup.
  4. Browse to a File Location.
  5. Enter a Password (this is used to Restore the key if needed).

Restore encryption keys -Report Server Configuration Manager (Native Mode)
  1. Start the Report Server Configuration Manager, and then connect to the report server instance you want to configure.
  2. On the Encryption Keys page, select Restore.
  3. Select the . ...
  4. Type the password that unlocks the file.
  5. Select OK.
Dec 14, 2020

Full Answer

How to restore SSRs key from SSRs?

First you can use SQL Server 2012 Reporting Services Configuration Manager; as part of Tim Ford's tip, SQL Server Reporting Services Configuration Tool, he covers, in great detail, using the SSRS Configuration Manager to backup and restore the SSRS key.

How to backup reporting services encryption key?

Enter a Password for the encryption key file and press the OK button. The Encryption Key backup gets created as shown below. Once the Encryption Key Backup is created successfully, the next step is to change the Service Account. In the Reporting Services Configuration Manager, click on Service Account as shown below.

Where are the SSRs encrypted data stored?

The encrypted values are stored both in the Reporting Services configuration files and in the Report Server database. In the event you restore a SSRS database to a new server, the encryption keys will need to be loaded onto the new server in order to allow that server to read and utilize all of the items noted in the above list.

How do I restore the encryption key manually?

If the Encryption Key needs to be restored manually, in the Reporting Services Configuration Manager click on the Encryption Keys and click on the Restore button as shown below. A new window opens as shown below. Specify the File Location of the Encryption Key along with the Password.

How to remove encryption keys from SSRS?

How to backup SSRS key?

What is symmetric key in SSRS?

How to rejoin SSRS farm?

Where are SSRS keys stored?

How to see which servers are connected to this report server database?

Where is rskeymgmt located?

See 4 more

About this website

image

Where is Ssrs encryption key stored?

The encrypted values are stored both in the Reporting Services configuration files and in the Report Server database.

How do I remove the encryption key in SSRS configuration tools?

How to delete encryption keys (Reporting Services Configuration Tool)Start the Reporting Services Configuration tool, and then connect to the report server instance you want to configure.Click Encryption Keys, and then click Delete. Select OK.Restart the Report Server Windows service.

Which options of Rskeymgmt are used to replace the encryption key?

You can use rskeymgmt to back up, delete, or restore the keys. If the keys cannot be restored, this tool provides a way to delete encrypted content that can no longer be used.

How do I restart SSRS Reporting Services?

Click Start > Administrative Tools > Services to open the Services management console. Right-click the SQL Server Reporting Services ([InstanceName]) service, and then click Restart.

How do I get an encryption key for Reporting Services?

Select Database. Re-create the ReportServer database. Restart the SQL Server Reporting Services....To resolve you can attempt changing the encryption keys within Reporting Services Configuration Manager:Open Reporting Services Configuration Manager.Select Encryption Keys.Select Change.

What is Ssrs scale out deployment?

A SQL Server Reporting Services (SSRS) scale-out deployment includes two or more report server instances that share a single report server database. By using a scale-out deployment, you can increase the number of users who can access reports at the same time, and improve the availability of the report server.

What is Ssrs for?

SQL Server Reporting Services (SSRS) is a SQL Server subsystem that enables the creation of graphical, mobile and printed reports using SQL Server and other data sources. SQL Server is a relational database management system (RDBMS) that supports transaction processing, business intelligence and analytics applications.

Which of the following is an extension of a file in which we store remote server encryption key backup?

Specify a file to contain the stored key. Reporting Services appends a . snk file extension to the file. Consider storing the file on a disk separate from the report server.

Can't connect to Report server?

If you can't connect to a report server, you either don't have permission to access it, or the server isn't registered. To register the server, select View menu > Registered Servers. Select the Reporting Services icon. Right-click Reporting Services, > New > Server Registration.

How do I find Reporting Services Configuration Manager?

In the Windows start menu, type reporting and in the Apps search results, click Report Server Configuration Manager. Click Start, then click Programs, then click Microsoft SQL Server, then click Configuration Tools, and then click Report Server Configuration Manager.

Where is SSRS config file located?

On the Windows machine where you installed SSRS, locate the rsreportserver. config file. The default location is C:\Program Files\Microsoft SQL ServerReportingServicesInstance\Reporting Services\ReportServer\rsreportserver. config.

Which of the following is an extension of a file in which we store remote server encryption key backup?

Specify a file to contain the stored key. Reporting Services appends a . snk file extension to the file. Consider storing the file on a disk separate from the report server.

What is Ssrs for?

SQL Server Reporting Services (SSRS) is a SQL Server subsystem that enables the creation of graphical, mobile and printed reports using SQL Server and other data sources. SQL Server is a relational database management system (RDBMS) that supports transaction processing, business intelligence and analytics applications.

Missing Encryption Key when migrating Reporting Services from SQL ...

Thanks Randolph West for the reply. Is there a way to delete the encryption key while the reporting services is not running? I will re-configure the connection strings and subscriptions and whatever else is required, if I can get atleast unencrypted part of my reports.

Removing Keys From Report Server - SQL Server Q&A from the SQL Server ...

If you have running several instances of SSRS and they are configured against a single database (you can do this even in standard edition ans you will see warning you mentioned). then when you delete a key from the Keys table a new one is automatically created if the node is running.

The report server is unable to access encrypted data. Apply a back-up ...

Hi Matt, Based on the current information, the root cause should be that the encryption key is corrupted. Here, I suggest that you create a new backup of the ecryption key on the old server, and restore the new encryption key to see if it works.

SSRS reports cannot be opened after deleting encryption key

Recently we have migrated SSRS from SQL Server 2005 to 2012 running on Windows 8. We deleted encryption key after observing that the reporting server was inaccessible. Then we were able to access the

How to remove encryption keys from SSRS?

When you use SSRS is in a multiple server / farm architecture, the -d / delete method removes all keys for all servers. In this case, the report server will no longer function until a new key is generated. For our example the command to issues to delete all encrypted data would be: rskeymgmt.exe -d -i SQL2012 . Fortunately, the command prompts you to confirm that you want to delete the key, because, again, ALL key data is removed! This situation would be similar to restoring just the SSRS databases and having to create a new key.

How to backup SSRS key?

The key backup process can be accomplished in two ways: either using Reporting Service Configuration Manager or the rskeymgmt command line utility. The rskeymgmt utility provides a method to backup and apply the SSRS symmetric key which is used to store data source connection and configuration data in the SSRS database and configuration file. This key is further used to allow multiple servers to join a SSRS database when used in a farm or scale out deployment of SSRS. You can also delete the key information, but you should be forewarned that all encrypted data is deleted along with the key when the delete command is used.

What is symmetric key in SSRS?

If your SSRS setup uses a farm approach with multiple instances, then every instance must use a copy of the symmetric key. The actual SSRS items which are encrypted include: Data source credentials which are stored in the database in order to connect to external databases and data sources.

How to rejoin SSRS farm?

To have that server rejoin the scaled out SSRS farm, you could issue this command: rskeymgmt -j -m remotecomputerNameOnNetwork -n namedreportserverinstance -u administratoraccountOnRemoteComputer -v administratorpasswordOnRemoteComputer. Unfortunately, I do not have a farm environment to show you the exact examples. However, this method does NOT delete the key and encryption information in the database like the -d argument.

Where are SSRS keys stored?

The encrypted values are stored both in the Reporting Services configuration files and in the Report Server database. In the event you restore a SSRS database to a new server, the encryption keys will need to be loaded onto the new server in order to allow that server to read and utilize all of the items noted in the above list. Otherwise an error will result when attempting to navigate to the Report Server. Furthermore, your embedded data sources would be unreadable if you add a new key. Of course you could recreate a SSRS key on the new server and then redeploy all the data sets, data sources, and reports. In that situation though, you would still have to recreate all the folders and more importantly, the security for those folders (and related reports). An easier alternative is the backup and restore the SSRS key, and specifically use the command line tool, rskeymgmt, to handle these tasks.

How to see which servers are connected to this report server database?

To get started, we will use the -l list argument to see the servers which are connected to this report server database. The command would be: rskeymgmt.exe -l -i SQL2012. The successful running of this command is shown below. This particular machine contains several versions of SQL Server, so we also must specify the instance name "SQL2012".

Where is rskeymgmt located?

The rskeymgmt utility can be found in the binn sub-directory of your SQL Server install director y. On my local server, it resides in: C:Program Files (x86)Microsoft SQL Server110ToolsBinn. Of course depending on the install process, your location may be different. Opening the command prompt and navigating to this directory, we can run rskeymgmt -? to get a list of arguments and additionally some example commands.

Where to save SSRS encryption key?

Tip: Save backup of the SSRS encryption key in your Database Backups folder so it automatically gets backed up to alternate media as part of your scheduled nightly job.

What is SSRS encryption?

SQL Server Reporting Services (SSRS) uses encryption to protect sensitive data with an encryption key. The encryption key used by SSRS is separate from the database and must be backed up separately.

How to restore encryption key in Reporting Services?

If the Encryption Key needs to be restored manually, in the Reporting Services Configuration Manager click on the Encryption Keys and click on the Restore button as shown below.

Do you have to ask for a password on a report?

Inside the Folders on the Home Page, ensure the Reports are there and it doesn't ask for a User Name and Password. If everything looks good then it means everything has gone smoothly.

Does SSRS report write data onto a particular location?

Before the change, ensure the new Service Account has the necessary access to that particular file location.

Background

This post topic is one that I look for often, since Reporting Services stores data for connection strings and settings encrypted, you need to take some steps when restoring the databases either to a new server in the case of migration or to a Test / Dev environment in the case of an environment refresh where you want all the same rights, users, reports for testing or application functionality..

Resolution

This article discusses how to migrate reporting services to a new server instance while keeping all reports / datasources and users intact.

How to remove encryption keys from SSRS?

When you use SSRS is in a multiple server / farm architecture, the -d / delete method removes all keys for all servers. In this case, the report server will no longer function until a new key is generated. For our example the command to issues to delete all encrypted data would be: rskeymgmt.exe -d -i SQL2012 . Fortunately, the command prompts you to confirm that you want to delete the key, because, again, ALL key data is removed! This situation would be similar to restoring just the SSRS databases and having to create a new key.

How to backup SSRS key?

The key backup process can be accomplished in two ways: either using Reporting Service Configuration Manager or the rskeymgmt command line utility. The rskeymgmt utility provides a method to backup and apply the SSRS symmetric key which is used to store data source connection and configuration data in the SSRS database and configuration file. This key is further used to allow multiple servers to join a SSRS database when used in a farm or scale out deployment of SSRS. You can also delete the key information, but you should be forewarned that all encrypted data is deleted along with the key when the delete command is used.

What is symmetric key in SSRS?

If your SSRS setup uses a farm approach with multiple instances, then every instance must use a copy of the symmetric key. The actual SSRS items which are encrypted include: Data source credentials which are stored in the database in order to connect to external databases and data sources.

How to rejoin SSRS farm?

To have that server rejoin the scaled out SSRS farm, you could issue this command: rskeymgmt -j -m remotecomputerNameOnNetwork -n namedreportserverinstance -u administratoraccountOnRemoteComputer -v administratorpasswordOnRemoteComputer. Unfortunately, I do not have a farm environment to show you the exact examples. However, this method does NOT delete the key and encryption information in the database like the -d argument.

Where are SSRS keys stored?

The encrypted values are stored both in the Reporting Services configuration files and in the Report Server database. In the event you restore a SSRS database to a new server, the encryption keys will need to be loaded onto the new server in order to allow that server to read and utilize all of the items noted in the above list. Otherwise an error will result when attempting to navigate to the Report Server. Furthermore, your embedded data sources would be unreadable if you add a new key. Of course you could recreate a SSRS key on the new server and then redeploy all the data sets, data sources, and reports. In that situation though, you would still have to recreate all the folders and more importantly, the security for those folders (and related reports). An easier alternative is the backup and restore the SSRS key, and specifically use the command line tool, rskeymgmt, to handle these tasks.

How to see which servers are connected to this report server database?

To get started, we will use the -l list argument to see the servers which are connected to this report server database. The command would be: rskeymgmt.exe -l -i SQL2012. The successful running of this command is shown below. This particular machine contains several versions of SQL Server, so we also must specify the instance name "SQL2012".

Where is rskeymgmt located?

The rskeymgmt utility can be found in the binn sub-directory of your SQL Server install director y. On my local server, it resides in: C:Program Files (x86)Microsoft SQL Server110ToolsBinn. Of course depending on the install process, your location may be different. Opening the command prompt and navigating to this directory, we can run rskeymgmt -? to get a list of arguments and additionally some example commands.

image

1.Videos of How Do I Reset My Ssrs Encryption Key

Url:/videos/search?q=how+do+i+reset+my+ssrs+encryption+key&qpvt=how+do+i+reset+my+ssrs+encryption+key&FORM=VDRE

24 hours ago  · Start the Report Server Configuration Manager, and then connect to the report server instance you want to configure. Click Encryption Keys, and then select Back Up. Type a …

2.SSRS Encryption Keys - Back Up and Restore Encryption …

Url:https://learn.microsoft.com/en-us/sql/reporting-services/install-windows/ssrs-encryption-keys-back-up-and-restore-encryption-keys?view=sql-server-ver16

26 hours ago  · How to recreate encryption keys (rskeymgmt) Disable the Report Server Web service and HTTP access. Use the instructions in the previous procedure to stop Web service …

3.Delete and Recreate Encryption Keys (Configuration …

Url:https://learn.microsoft.com/en-us/sql/reporting-services/install-windows/ssrs-encryption-keys-delete-and-re-create-encryption-keys?view=sql-server-ver16

32 hours ago To do this follow these steps: Open Reporting Services Configuration Manager, and then connect to the instance of SQL Server Reporting Services. Click Microsoft service Identity on the left …

4.Recover SSRS Encryption Key - social.msdn.microsoft.com

Url:https://social.msdn.microsoft.com/Forums/sqlserver/en-US/b816c8c5-37fd-4601-9e2e-3152871ec614/recover-ssrs-encryption-key?forum=sqlreportingservices

23 hours ago  · Web Server - SQL Server 2005 Reporting Services w/ SP3 ; I just lost the hard drive in the web server; the database server is completely intact. I reloaded SSRS, SP3 and …

5.SSRS Encryption Key

Url:https://www.ministryplatform.com/kb/ministryplatform/advanced-users/backups/ssrs-encryption-key

21 hours ago  · You will need to reset your encryption keys. To do that: Open Reporting Services Configuration Manager and select 'Encryption keys' tab; Click 'Delete' in 'Delete Encrypted Keys'.

6.SSRS Encryption Key - social.msdn.microsoft.com

Url:https://social.msdn.microsoft.com/Forums/en-US/b6279924-ba56-417d-a42e-2f3a4c153429/ssrs-encryption-key?forum=sqlreportingservices

35 hours ago  · Apparently, if you don't reconfigure SSRS's service account using the Reporting Services Configuration Tool, SSRS never thinks that the account has changed. The attempt to …

7.Change the SQL Server Reporting Services Service Account

Url:https://www.mssqltips.com/sqlservertip/5787/change-the-sql-server-reporting-services-service-account/

24 hours ago  · Choose Change Database > Choose Existing report server database. Select the restored database called ReportServer on the destination instance. From the left navigation …

8.SSRS – Migrating or Restoring Reporting Services …

Url:https://www.atsqltools.com/wp/2018/07/29/ssrs-migrating-or-restoring-reporting-services-databases/

3 hours ago

A B C D E F G H I J K L M N O P Q R S T U V W X Y Z 1 2 3 4 5 6 7 8 9