-
Title
Virtual Export to Azure fails with "The provided client secret keys are expired" -
Description
One Time Export or Virtual Standby jobs to Azure is failing with below error;
ErrorSerialized exception information was not found in the database.Recovered details are: System.AggregateException: One or more errors occurred. ---> Replay.Core.Contracts.Export.ExportException: Cannot execute an export task ---> Microsoft.IdentityModel.Clients.ActiveDirectory.AdalServiceException: AADSTS7000222: The provided client secret keys are expired. Visit the Azure Portal to create new keys for your app, or consider using certificate credentials for added security: https://aka.ms/certCreds Trace ID: 01d26b5e-8800-4c16-bd46-99c65b777d00 Correlation ID: afe681aa-1642-4b3b-ba7b-67f911601422 Timestamp: 2020-04-27 11:05:19Z ---> System.Net.Http.HttpRequestException: Response status code does not indicate success: 401 (Unauthorized). ---> Microsoft.IdentityModel.Clients.ActiveDirectory.AdalException: {"error":"invalidclient","errordescription":"AADSTS7000222: The provided client secret keys are expired. Visit the Azure Portal to create new keys for your app, or consider using certificate credentials for added security: https://aka.ms/certCreds\r\nTrace ID: 01d26b5e-8800-4c16-bd46-99c65b777d00\r\nCorrelation ID: afe681aa-1642-4b3b-ba7b-67f911601422\r\nTimestamp: 2020-04-27 11:05:19Z","errorcodes":[7000222],"timestamp":"2020-04-27 11:05:19Z","traceid":"01d26b5e-8800-4c16-bd46-99c65b777d00","correlationid":"afe681aa-1642-4b3b-ba7b-67f911601422","erroruri":"https://login.microsoftonline.com/error?code=7000222"}: Unknown error--- End of inner exception stack trace --- --- End of inner exception stack trace --- at Microsoft.IdentityModel.Clients.ActiveDirectory.Internal.Http.AdalHttpClient.d__22`1.MoveNext() -
Cause
The Client Secret Key has been setup with an expiry date on the Azure Portal. The Secret Client Key has expired and a new one has not yet been created by the user. -
Resolution
In order to allow for Virtual Exports to run to Azure, a valid Client Secret Key must be present under the Azure App Registration. In order to generate a new Secret Client Key, please follow the below steps,
From your Azure portal account,
Navigate to Azure Active Directory | App Registration | Click on your App created for Virtual Standby | Certificates & secrets |
From here you can see all existing 'Client Secrets' if you receive this error, you should see that at-least 1 Secret key has Expired.
By clicking on '+ New client secret' you have the option to generate a new Client Secret key for this App.
(As of the time this KB is written, you have the option to set this to expires in '1 year', '2 years' or 'Never'.)
Give the Key a description and click 'Add'.Once the new Client Secret string is generated, copy this value.
Note;"Copy the new client secret value. You won't be able to retrieve it after you perform another operation or leave this blade."From the Rapid Recovery Core UI,
Navigate to: More | Cloud AccountsOn the right hand side of your Azure account, click "..." | EditNow Paste the 'Client Secret' into the 'Secret Key:' field and hit 'Save'.
The new Client Secret Key has now been generated and applied to your Rapid Recovery Cloud account. You can now proceed to perform Virtual Export and Virtual Standby jobs to your Azure account.