-
Title
Exception, "CryptEncrypt" when attempting to deploy Change Auditor Agents using a long password -
Description
When trying to install/upgrade Change Auditor Agents from the Change Auditor Client 'Deployment' screen the following error / exception is experienced:
Exception: CryptEncrypt
Stack Trace:
Quest.Sys.Crypto.EncryptRSA_Impl(Byte[] publicKey, Byte[] plainTextData) at ChangeAuditor.Sys.SecureBlob.Serialize(Byte[] data, IEnumerable`1 publicKeys) at ChangeAuditor.Sys.SecureBlob.Serialize(String clearText, IEnumerable`1 publicKeys) at ChangeAuditor.Sys.DataAccess.InstallAgent(Guid serverID, String userName, String password, String adamUserName, String adamPassword, DateTime when, AdvancedDeploymentConfig advanced) at ChangeAuditor.Coordinator.Service.InstallAgent(Guid serverID, String userName, String password, String adamUserName, String adamPassword, Nullable`1 when, AdvancedDeploymentConfig advanced)
-
Cause
The issue is related to a machine key that generates a public key that is not long enough to encrypt the password. -
Resolution
1. Download Microsoft Process Monitor (http://technet.microsoft.com/en-ca/sysinternals/bb896645.aspx) and filter for the directory C:\Programdata\microsoft\Crypto\RSA\MachineKeys on the Coordinator server2. Restart the coordinator and watch in process monitor which key is used by Change Auditor3. Delete the key file used by Change Auditor4. Restart the Change Auditor Coordinator service and it will generate a new key5. Restart the Coordinator one more time7. Close the Coordinator tray icon from the sys tray and launch again from C:\Program Files\Quest\ChangeAuditor\Service\CoordinatorTray.exe8. Verify Agent deployment now works as expected when using the account with long passwordIf the password is longer than 58 characters, these steps will not work. 58 is the maximum supported length at this time.