SSRS SQL Reporting Services Error. Unable to validate data

For hours I have been troubleshooting a SQL Reporting Services/SSRS issue using HTTPS/SSL.

The environment is quite generic: Configuration Manager 2007 R2, SQL 2008 R2 Service Pack 2. No other known issues, except HTTP 500 when trying to use Reports from Reporting Services. When browsing to the Report Service URL we got HTTP 500 Internal Server error and the message contained “Unable to validate data”.

Double and triple checking all the settings were correct: usernames, passwords, hostnames, certificate..

Looking at the log files and event logs (System and Application) and found some hints

System.Web.HttpException: Unable to validate data.

at System.Web.Configuration.MachineKeySection.EncryptOrDecryptData(Boolean fEncrypt, Byte[] buf, Byte[] modifier, Int32 start, Int32 length, IVType ivType, Boolean useValidationSymAlgo, Boolean signData)

InvalidOperationException: This implementation is not part of the Windows Platform FIPS validated cryptographic algorithms.

And found this KB: http://support.microsoft.com/kb/981119

Change the FIPS registry value and… still it didn’t work.. After some more time I doubled check the FIPS configuration and remembered there are two settings for FIPS, one for Windows XP/2003 and one for Windows 2008/Vista.

Have a look at KB811833 for more information.

The registry settings are

  • This security setting affects the following registry value in Windows Server 2008 and in Windows Vista:

    HKLM\System\CurrentControlSet\Control\Lsa\FIPSAlgorithmPolicy\Enabled

    This registry value reflects the current FIPS setting. If this setting is enabled, the value is 1. If this setting is disabled, the value is 0.

  • This security setting affects the following registry value in Windows Server 2003 and in Windows XP:

    HKLM\System\CurrentControlSet\Control\Lsa\FIPSAlgorithmPolicy

    This registry value reflects the current FIPS setting. If this setting is enabled, the value is 1. If this setting is disabled, the value is 0.

Note! These key will require a restart

Also note that these registry values may be used by applications/features in depended on the underlying operating system, so be sure to configure both settings for enable or disable FIPS.


Advertisements