cant process ssas db on vm - error says source is encrypted and other things

  • i tried MSOLEDBSQL (in ssas's conn string to the engine) instead of sqlncli11 but got the same error.  it might be time to bring in MS.

    • This reply was modified 17 hours, 19 minutes ago by stan.
  • thx steve, that was already done in step #2 following your recommendation.   #1 just proved that db was accessible from another client.

    i'm wondering if the community has heard that there is another way to turn on encryption in sql server through registry keys?   and if yes, how i can see whether that was done here and if that would be concealed from me looking at such settings the usual way.

    • This reply was modified 17 hours, 18 minutes ago by stan.
  • turning on encryption for the server? Likely there is, but not sure I've seen this documented. Most of the server side items require the MMC for SQL Server Configuration Manager to set this.

    For the client, it's setting the connection string property.

  • may have to open a ticket with MS.   will post back here what, if anything, that i find out.

  • encryptthruregistry

  • tried following the instructions shown below , thru powershell, to determine if certain known registry settings might have been set but basically the error thrown was that there is no folder called SuperSocketNetLib...not on any of the drives including c:...

    not sure what the HKLM portion means but i eventually went with c:\program files\microsoft sql server\...mssql\supersocketnetlib and got the ps error mentioned

    Get-ItemProperty -Path 'HKLM:\SOFTWARE\Microsoft\Microsoft SQL Server\MSSQL15.MSSQLSERVER\MSSQLServer\SuperSocketNetLib' | Select-Object ForceEncryption

    powershell

  • i believe this is the problem.   Does the community know what causes these values to be set to 1?   Is that perhaps the default nowadays?   I dont see them even in advanced ssas settings in ssms.   1=required.

    in C:\Program Files\Microsoft SQL Server\MSAS16.MSSQLSERVER\OLAP\Config    file  msmdsrv.ini    has these settings.

    <Security>

    <DataProtection>

    <RequiredProtectionLevel>1</RequiredProtectionLevel>

    </DataProtection>

    <AdministrativeDataProtection>

    <RequiredProtectionLevel>1</RequiredProtectionLevel>

    </AdministrativeDataProtection>

     

    • This reply was modified 13 hours, 31 minutes ago by stan.
  • this gets better and better.   we see the same values on another vm's config  where there is no issue with processing full an ssas db.   we also see the problematic server's native client is an older version than the one we installed on the vm where processing works.   i'm going to wait a day or 2 to see what the community thinks before we do anything.

Viewing 8 posts - 16 through 23 (of 23 total)

You must be logged in to reply to this topic. Login to reply