Skip to main content
Solved

VBR Migration to New Server Error when accessing User and Roles

  • May 23, 2025
  • 15 comments
  • 351 views

Forum|alt.badge.img+1

VBR Migration to New Server Error when accessing User and Roles.

Did a test migration from an old VBR to a new server. Most functions and configuration migrated successfully, just need to re-enter credentials for the cloud, storage (NAS and immutable). Backup jobs are also running successfully and configuration backups are working. However when I went to Users and Roles, I got the error below, “Failed to unprotect data:…..”. I thought initially, it was just the encryption so I enabled but still get the same error.

 

What is causing this issue? Thanks.

Best answer by spider32

Support gave me a cmd to run in pgadmin. It basically resets to null the column secret in the backup.security.accountmfaprofile table. 

update "backup.security.accountmfaprofile" set secret = '';

15 comments

Tommy O'Shea
Forum|alt.badge.img+5
  • Veeam Legend
  • 359 comments
  • May 23, 2025

Was the old server domain joined and is the new server also domain joined? All the same users exist?

Even then, it shouldn't stop the users and roles setting from opening. Have you created a support ticket for this issue? 


Chris.Childerhose
Forum|alt.badge.img+21
  • Veeam Legend, Veeam Vanguard
  • 9587 comments
  • May 23, 2025

Not sure if versions matter but support will be best to help with this.


Forum|alt.badge.img+1
  • Author
  • Influencer
  • 100 comments
  • May 23, 2025

Both are domain joined and the users are the same for both.

I have not opened a support ticket yet. I’m trying a couple of thing to see if this error would go away. If not, I’ll check with support.

Thanks!


Chris.Childerhose
Forum|alt.badge.img+21
  • Veeam Legend, Veeam Vanguard
  • 9587 comments
  • May 23, 2025

If you do go with support report back the fix once you know.


coolsport00
Forum|alt.badge.img+21
  • Veeam Legend
  • 4903 comments
  • May 24, 2025

Because of the complexity of what you did...best to go through Support as Chris suggested. Let us know what they find & the resolution. 


Marcel.K
Forum|alt.badge.img+9
  • Veeam Legend
  • 297 comments
  • May 26, 2025

during migration or restore of configuration backup (at the end) is showing that credentials are restored properly. 

missing credentials are domain credentials or local?

if domain, i can image that connection was missing, so that could be the problem


lukas.k
Forum|alt.badge.img+12
  • Veeam Vanguard
  • 363 comments
  • May 26, 2025

I had a similar issue when I migrated a customer from MSSQL to PGSQL with a domain-joined construct (which I don’t recommend anymore, different topic).

The support was able to help so that’s absolutely the best way to go.


Forum|alt.badge.img+3
  • Comes here often
  • 192 comments
  • May 29, 2025

How did you do the migration? With the configuration restore?

The error is about Veeam being unable to decrypt the secrets in the configuration database -- Veeam uses a salt for a few versions now in addition to the machine key on the original server to encrypt secrets in the database -- if the database was migrated manually (i.e., just moving the database files), this will not work as the salt + machine key are not included this way, and the new server cannot decrypt the secrets.

Use this process only to migrate the VBR server to a new server: https://helpcenter.veeam.com/docs/backup/vsphere/vbr_config_migrate.html?ver=120


Tommy O'Shea
Forum|alt.badge.img+5
  • Veeam Legend
  • 359 comments
  • May 29, 2025

How did you do the migration? With the configuration restore?

The error is about Veeam being unable to decrypt the secrets in the configuration database -- Veeam uses a salt for a few versions now in addition to the machine key on the original server to encrypt secrets in the database -- if the database was migrated manually (i.e., just moving the database files), this will not work as the salt + machine key are not included this way, and the new server cannot decrypt the secrets.

Use this process only to migrate the VBR server to a new server: https://helpcenter.veeam.com/docs/backup/vsphere/vbr_config_migrate.html?ver=120

That is a great question. I never considered that a manual database migration might have been attempted, and that certainly could explain this error. 


Forum|alt.badge.img+1
  • Author
  • Influencer
  • 100 comments
  • May 29, 2025

I did not manually moved the DB. As pointed out, I have followed the instructions on https://helpcenter.veeam.com/docs/backup/vsphere/vbr_config_migrate.html?ver=120.

I opened a ticket with support a couple of days ago and we’re still figuring out the issue. We will do a remote session and will update you folks. 

Thanks again for all your feedback! 


coolsport00
Forum|alt.badge.img+21
  • Veeam Legend
  • 4903 comments
  • May 29, 2025

Sounds good ​@spider32 . Keep us posted what they find out.


Chris.Childerhose
Forum|alt.badge.img+21
  • Veeam Legend, Veeam Vanguard
  • 9587 comments
  • June 2, 2025

Hi ​@spider32 - did you get an answer to your question and if so can you please share so we can mark an answer as “Best Answer” even if it is yours.


Forum|alt.badge.img+1
  • Author
  • Influencer
  • 100 comments
  • Answer
  • June 3, 2025

Support gave me a cmd to run in pgadmin. It basically resets to null the column secret in the backup.security.accountmfaprofile table. 

update "backup.security.accountmfaprofile" set secret = '';


Chris.Childerhose
Forum|alt.badge.img+21
  • Veeam Legend, Veeam Vanguard
  • 9587 comments
  • June 3, 2025

Great glad to hear you got things fixed up.


coolsport00
Forum|alt.badge.img+21
  • Veeam Legend
  • 4903 comments
  • June 4, 2025

Glad to hear Support got you sorted ​@spider32 👍🏻