| Event Id | 10521 |
| Source | BizTalk Server 2004 |
| Description | Could not load secrets from the registry of the master secret server. |
| Event Information | According to microsoft: Cause: The master secret server cannot get the secret from the registry. The most likely scenario for this is that a Enterprise Single Sign-On (SSO) system generated the master secret when it was running under one service account, and then the service account was changed. The master secret is stored in the registry in encrypted form using a key based on the identity of the service account the SSO service is running under. Therefore, if you change the service account, SSO cannot decrypt an existing key. User Action : 1. Verify that the service account running the single sign-on service is a member of the Single Sign-On administrators group. 2. If you have recently changed the service account the SSO is running under, you can do one of the following: a. Change the service account back to the old service account. b. If you backed up the secret before changing the service account, you can restore the master secret. c. Generate a new master secret using the new service account. If you do this, you will not be able to retreive any information already stored in the Credential database using the old master secret. To restore the master secret, do the following: 1. On the Start menu, click Run. 2. In the Run dialog box, type cmd, and then click OK. 3. At the command line, go to the Enterprise Single Sign-On installation directory. The default installation directory is <drive>:\Program Files\Common Files\Enterprise Single Sign-On. 4.Type ssoconfig -restoresecret <restore file>, where <restore file> is the path and name of the file where the master secret is stored. |
| Reference Links | Could not load secrets from the registry of the master secret server |
Catch threats immediately
We work side-by-side with you to rapidly detect cyberthreats
and thwart attacks before they cause damage.