Hi,
I needed to change the passsword of this user because my domain account was not allowed to run miisclient even
it was it correct local Groups.
I was able to log on and do my things but some day later after a restart I can get the service running Again.
get even 6208,
The server encryption keys could not be accessed.
User Action
Verify that the service account has permissions to the following registry key:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Forefront Identity Manager\2010\Synchronization Service
If the problem persists, run setup and restore the encryption keys from backup.
This took me to the program miiskmu, which someone used to fix this problem. That article says that you should "abandon key
"
- start the application “miiskmu”
- Choose the option to abandon your key set.
- Start the “Directory Sync Configuration” tool and reconfigure your synchronization
- After this start your services again (the “Forefront Identity Manager Synchronization Service” was already started) and start a manual sync
-
This could lead to the following message in your eventlog:
Eventid: 6126
The management agent “TargetWebService” completed run profile “Delta Confirming Import” with a delta import or delta synchronization step type. The rules configuration has changed since the last full import or full synchronization. - So with the help of the miisclient I started a full sync, a full confirming import and a export"
In this prgram (“miiskmu”)there is also an option to "add new key set (reuires service to be stopped)
and there I can choose "re-encrypt all Microsoft identy integration Service data with new key"
and I get an option to Assing a domain user to this.
My question is, can I use this "add new key with re-encrypt" and a domain user.. and be able to start services again and sync, or do I need to "abandon key" and follow that instruction ?
thans
.
Erro
