JJack Posted September 17 Posted September 17 We are running Windows scheduled tasks under a group managed service account (gMSA). This is to safeguard our databases. It used to be possible to set up a task with a different account and once tested and working, change it to use the gMSA. However, we now need to use an updated json file that only specifies a KeysafeKeyID. When run, I get error: Decryption of authentication data failed: Key not valid for use in specified state. The advice for this error is to delete the import.cfg file and run from the command line, requiring the re-entry of the instance id and API key. The next batch run will therefore pause and wait, indefinitely, for the entry of the instance id etc. I cannot seem to run the job using the gMSA account interactively. Please advise therefore how I can set up this run, eg is there a mechanism to provide an input file to the scheduled/batch run that would contain the answers it needs? We have Hornbill Asset Import Utility v4.10.0
Steve Giller Posted September 17 Posted September 17 3 minutes ago, JJack said: I cannot seem to run the job using the gMSA account interactively. This is the comment I'm not understanding correctly. If that account can be used to run the scheduled import, what is stopping it from being used to run the import at the CMD prompt to register the credentials?
Jim Posted September 17 Posted September 17 We use service accounts also and run as that account in task scheduler, the very first initial set up, you need to be logged in as the service account to set up the api key
JJack Posted September 17 Author Posted September 17 Hi @Steve Giller and @Jim, I hadn't been able to get this to work., I'll review and retry, thanks both.
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now