Uninstalling a Service Pack or Cumulative Update Causes Requests to a Report Server and Report Manager to Fail (SSRS)

Uninstalling a Service Pack or Cumulative Update Causes Requests to a Report Server and Report Manager to Fail (SSRS)

 

Background


Uninstalling a Service Pack or Cumulative Update causes requests to Report Server and Report manager to fail.  The Report Server trace log will contain an error similar to the following:

Microsoft.ReportingServices.Diagnostics.Utilities.ReportServerDisabledException: The report server cannot decrypt the symmetric key used to access sensitive or encrypted data in a report server database. You must either restore a backup key or delete all encrypted content and then restart the service. Check the documentation for more information. 

Report Manager shows an error similar to the following:

The report server cannot decrypt the symmetric key used to access sensitive or encrypted data in a report server database. You must either restore a backup key or delete all encrypted content and then restart the service. Check the documentation for more information. (rsReportServerDisabled)

This is a known issue  and is the behavior is due to changes required to continue compliance with FIPS certification.

Workaround if you have a backup of the report server symmetric key


  1. Restore the Reporting Services symmetric key.   For more informaiton, see Backing Up and Restoring Encryption Keys.

Workaround if you do not have a backup of the report server symmetric key


  1. If you have already uninstalled the update or service pack, re-install the update or service pack. 
  2. Backup the Reporting Services symmetric key. 
  3. Uninstall the update or service pack. 
  4. Restore the Reporting Services symmetric key.

Applies to


If your are applying one of the following updates or later to a build that is BEFORE any of the listed versions, then the issue will occur during the uninstallation of the update.  However, if your are applying an update to a build that is ON or AFTER the listed versions, then the issue will not occur.

  • SQL Server 2008 SP3
  • SQL Server 2008 SP2 CU5
  • SQL Server 2008 SP1 CU15
  • SQL Server 2008 R2 CU9
  • SQL Server 2008 R2 SP1 CU2

More Information


To continue complicance with FIPS standards for encrypting secure information, a change was made to the way the Symmetric Key is stored in the Report Server database.   The change prevents previous versions of report server from decrypting and using the symmetric key.  For more information on the compliance changes, see http://support.microsoft.com/kb/2283072.

Microsoft recommends that administrators backup the report server symmetric key before upgrading their servers, applying patches, and whenever a backup of the report server database is created.
 

Leave a Comment
  • Please add 3 and 2 and type the answer here:
  • Post
Wiki - Revision Comment List(Revision Comment)
Sort by: Published Date | Most Recent | Most Useful
Comments
  • Ed Price - MSFT edited Revision 5. Comment: One typo and making fonts consistent. Great article!

Page 1 of 1 (1 items)
Wikis - Comment List
Sort by: Published Date | Most Recent | Most Useful
Posting comments is temporarily disabled until 10:00am PST on Saturday, December 14th. Thank you for your patience.
Comments
  • Ed Price - MSFT edited Revision 5. Comment: One typo and making fonts consistent. Great article!

Page 1 of 1 (1 items)