Plesk login page is not accessible: Failed to decrypt attribute 'password'

[mahesh]

Question:
Plesk login page is not accessible: Failed to decrypt attribute 'password' because the keyset does not exist
Symptoms
Plesk login page shows one of the following error messages:

Code Select Expand

HTTP Error 500.19 - Internal Server Error
Error Code 0x8007000d
Config Error Failed to decrypt attribute 'password' because the keyset does not exist

Code Select Expand

Keyset does not exist (Exception from HRESULT: 0x80090016)
Cause
Insufficient permissions on the files:

• %ALLUSERSPROFILE%\Microsoft\Crypto\RSA\MachineKeys\6de9cb26d2b98c01ec4e9e8b34824aa2_*
• %ALLUSERSPROFILE%\Microsoft\Crypto\RSA\MachineKeys\76944fb33636aeddb9590521c2e8815a_*

Resolution
1.Connect to the Plesk server via RDP.

2.Open the folder %ALLUSERSPROFILE%\Microsoft\Crypto\RSA\MachineKeys.
Note: Displaying of hidden files and protected system files should be enabled in Windows Control Panel > Folder Options.

3.Find files with the names that start with 6de9cb26d2b98c01ec4e9e8b34824aa2_ and 76944fb33636aeddb9590521c2e8815a_.

4.Check access permissions on these files (right-click on a file > Properties > Security tab).

Here are the correct permissions:

System, Administrators, TrustedInstaller - Full control
IIS_IUSR, WMSVC - Read
LOCAL SERVICE (if available) - Read

 

If the issue still persists, apply the following steps:

1.Start a command prompt as an Administrator.

2.Obtain a GUID:

Code Select Expand

c:\>reg query "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography" | findstr MachineGuid
3.Verify that the files have names 6de9cb26d2b98c01ec4e9e8b34824aa2_GUID and 76944fb33636aeddb9590521c2e8815a_GUID.

Example:

If a GUID is:

Code Select Expand

c:\>reg query "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography" | findstr MachineGuid
MachineGuid REG_SZ 40c6fa54-0d9a-45ae-91c5-e85eb36dcbd2
then files will have names:

• 6de9cb26d2b98c01ec4e9e8b34824aa2_40c6fa54-0d9a-45ae-91c5-e85eb36dcbd2
• 76944fb33636aeddb9590521c2e8815a_40c6fa54-0d9a-45ae-91c5-e85eb36dcbd2

4.Restart IIS using the following command in a command-prompt:

Code Select Expand

c:\>iisreset