How to restore Data Encryption Key to CRM 2013

(0) Share

Report

Posted on by Loxy Zhou

120

Hi,

I have reimported the Dev org to QA environment without any data encryption key backup. I have also unstilled the CRM 2013 installatin in DEV. Now I encountered the data encryption problem in QA env when I am going to change the user Primary email address that is not allowed. The workflow email is not be sent too.

I have only the DEV MSCRM_Config and Org database now. How can I restore the original data encryption key in Dev?

BTW, I have never enabled the data encryption feature in DEV and QA environment.

Thanks a lot in advance.

*This post is locked for comments

I have the same question (0)

All responses (6)

Answers (1)

Pradeep Pawar 2,930 on at

Like (0)

Report
Copy link

Link copied!

I believe you can try to restore Dev Org somewhere and take encryption key out.

Not sure.

Was this reply helpful? Yes No
Verified answer

Loxy Zhou 120 on at

Like (0)

Report
Copy link

Link copied!

I have found the data encryption key from one of original snapshot.

But there is a tricky thing which of data encryption activation can be done without original key.

I am able to activate data encryption using any string as long as meet three requriements below:

1. Meet the strong encryption key requirements (10-100 characters in length etc.)

2. Current CRM user must has the system administrator role and must be in PrivUserGroup security group

3. Current application server must be in PrivUserGroup security group.

Was this reply helpful? Yes No
Ajay Ubbott 410 on at

Like (0)

Report
Copy link

Link copied!

Hello Loxy,

My situation seems similar to yours: -

I have recently upgraded a single server deployment of on-premise MSCRM 2011 to MSCRM 2013. Data Encryption NOT enabled yet. Then I migrated this upgraded MSCRM 2013 to another server. During migration, ignored the warning message for Data Encryption. Now, after the organization import, it does NOT allow me to activate data-encryption and gives the following error message:-

"Cannot perform 'activate' because the encryption key doesn’t match the original encryption key that was used to encrypt the data."

Any Guess?

\Ajay

Was this reply helpful? Yes No
Joe Woltering 12,163 on at

Like (0)

Report
Copy link

Link copied!

Do you have a backup of your original QA config database? You'll need to take that and restore to your DEV environment then pull the key out and paste it into your new Org. That's how I resolved it anyway.

Was this reply helpful? Yes No
Ajay Ubbott 410 on at

Like (0)

Report
Copy link

Link copied!

Thanks for your reply Joe,

I have the backup of the Config database. But the fact is that the Data Encryption key was NEVER enabled on the original CRM. I just migrated its database to another server. After migration, if I try to enable encryption, I get the error as I mentioned in my previous post.

In the Tech articles, Microsoft recommends to copy the encryption key before data migration, but does that mean - You should Not migrate data without the data encryption enabled in source crm?

After migration, the Data encryption screen looks like: -

When I mention the key and click on "Activate" button, I get the following: -

Was this reply helpful? Yes No
Joe Woltering 12,163 on at

Like (0)

Report
Copy link

Link copied!

Yeah, I think that was the confusing part because I had never enabled encryption on my 2011 system either but apparently it still needs that key after you upgrade. Were you able to restore the CONFIG db to your DEV environment?

Was this reply helpful? Yes No