Failed to decrypt the object error when promoting the reports in business objects

[former_member223477]

Hi All,

I am getting the below error when I am trying to promote the reports from DEV to PROD by using the Promotion Management tool in Business Objects.

Resolution Status=Copied, Dependency Status=All the required dependencies are included., Commit Status=Commit status is unknown, Promotion Status=Failure : Failed to decrypt the object, please get the latest object from the cluster and try again (FWB 00077) The server supplied the following details: OCA_Abuse exception 7682 at [.osca_i_impl.cpp : 823] 65330 {496342} ...Failed to decrypt the object

Could you please suggest me is there anything we need to do to overcome from this issue.

Thanks in advance.

[denis_konovalov]

Have you tried searching SAP Knowledge base for this error ?

My search shows 2 KBA's on this, maybe they help you solve the problem.

[Former Member]

To save people the time of having to go search the knowledge article. I would like to answer and confirm that when this happens it is because the user is promoting with a delegated administrators account. You have to use the full administrator account to promote unless you do the following steps to confirm delegated admin can do it.

Symptom

• Some objects are not promoted to the destination system when using Promotion Management (e.g. Crystal Reports). Folders, for example, are promoted correctly.
  
  The following error is obtained on the failure status after the promotion:"Resolution status=Copied, Dependency Status=Some of the required dependencies are not selected. Commit Status=Commit attempted and failed. Promotion Status=Failed to decrypt the object, please get the latest object from the cluster and try again (FWB 00077). The server supplied the following details: OCA_Abuse exception 7682 at [.osca_i_impl.cpp : 823] 65330 {31914} ...Failed to decrypt the object."
• Unable to promote objects using delegated Administrators
• The following error messages can be seen in the destination Central Management Server (CMS) trace:

"2012 05 30 15:49:48:195| |==||cms_SIA.CentralManagementServer|||(wireob.cpp:3429) BCM error doing decryption, error:Invalid message digest for data

2012 05 30 15:49:48:195| |==||cms_SIA.CentralManagementServer|||(osca_i_impl.cpp:822) Failed to decrypt object id:9999, error: Invalid message digest for data."

Environment

• SAP Business Intelligence Platform (BI) 4.0 Service Pack 04 (SP04, SP05)
• SAP Business Intelligence Platform (BI) 4.2

Reproducing the Issue

1. Create a promotion job
2. Use a delegated administrator user to login to the source CMS when creating the job
3. Promote that job

Cause

• Due to security design, non-administrators of BI system cannot extract certain encrypted fields externally (such as database connection information).
• This is tracked as ADAPT01642224 and the solution is included in BI 4.0 Support Pack 4 (SP04) Patch 4.8, BI 4.0 Support Pack 5 (SP05) Patch 5.4, BI 4.0 Support Pack 6 (SP06), BI 4.1 and BI 4.2. However, you need to apply the steps from Resolution section in order to be able to use a delegated administrators.
• For information on accessing the release schedule for SAP BusinessObjects updates, see SAP KBA 1554406.

Resolution

A new command line parameter for the CMS was added in the following versions: BI 4.0 SP04 Patch 4.8, BI 4.0 SP05 Patch 5.4, BI 4.0 SP06, BI 4.1, BI 4.2

**An upgrade to the version mentioned above (according to your codeline) ALONGWITH the steps below must be applied in order to be able to use a delegated administrators.

When creating a Promotion Management (LCM) Job a user must be specified when connecting to the source repository. To apply the solution an existing group must be identified, or a new groups created, to which all these users must exist.

1. In the source system login into the Central Management Console (CMC)
2. Select 'Users and Groups' and identify (or create a new) group. The name of the group does not matter.
3. Right click on the group and select 'Properties'
4. Copy the Cluster Unique Identified (CUID) of the chosen group. This will be unique to the chosen group - an example of the CUID is circled below:

1. In the CMC select 'Servers' from the drop down list
2. Select 'Core Services'
3. For each Central Management Server (CMS) perform the following steps
   1. Right click on it and select 'Properties'
   2. at the end of the 'Command Line Parameters' add a space and then -systemUserGroupCUID <CUID>
   1. Replace the <CUID> with the CUID identified in step 4
   2. e.g. the command line, using the example screenshot would become:

1. -loggingPath "C:/SAP/BI4/SAP BusinessObjects Enterprise XI 4.0/logging/" -systemUserGroupCUID AbpIgL2rtrdOtUOXfDGW5Ig

1. Save the change by clicking on 'Save & Close'
2. Restart the Central Management Server by right clicking on it and selecting 'Restart Server'

Add any user that is used in a Promotion Management Job to connect to this source system so that it is a member of the group chosen in step 4

Repeat these steps for any system that is used as a 'source system' in an Promotion Management Job