Updating SharePoint Farm Credentials - Microsoft.SharePoint.Administration.SPCredentialManager
DecryptWithMasterKey(Byte[] rgbEncryptedPassphrase)

Ran into this event log error today.  Searched for a while and all articles stated to run the following command: psconfig -cmd configdb -create -server ServerName -database ConfigDBName -user Domain\User -password Password

By doing this, expect to loose time and everything but content. You will have to do the following to properly recover:

  1. Recreate each web application and reattach the existing content database.
  2. Recreate the Shared Services Provider web application and reattach that database.
  3. Re-add each web front-end and application server to the farm.

Better Solution

If you know the password before the password change, you can do the following to your machine with WSS on it:

  1. Ensure the WSS Administration and WSS Timer services are running on all machines.
  2. On machine with central admin (WFE1)
    1. stsadm -o updatefarmcredentials -userlogin "domain user" -password "newPassword"
    2. iisreset /noforce (optional)
  3. On any machine after this completes (wait for the "Administration Application Pool Credential Deployment" job definition to go away on the Timer Job Definitions central admin page)
    1. stsadm -o updateaccountpassword -userlogin "domain user" -password "newpassword" -noadmin

Otherwise, after a password change:

  1. Go to the server central admin box:
    1. run the command stsadm –o updatefarmcredentials –userlogin <domain\name> -password <newpassword>
  2. User must run IISReset /noforce to complete the action.
  3. Delete the updatefarmcredentials timer job on central admin page->operations->job definitions page
    1. Go to each other server in the farm, and run the command:
      1. stsadm –o updatefarmcredentials –userlogin <domain\name> -password <newpassword> -local. 
      2. If –local isn’t supplied, it will fail because step (4) created a timer job that locks creating OTHER timer jobs.
  4. On any machine after this completes (wait for the "Administration Application Pool Credential Deployment" job definition to go away on the Timer Job Definitions central admin page)
    1. stsadm -o updateaccountpassword -userlogin "domain user" -password "newpassword" -noadmin

Permalink | Comments (0) | Post RSSRSS comment feed