USMT and Encryption Key

[jeffpoling]

We had an issue with our StateMigrationPoint today that caused one machine to have an issue with the USMT capture and restore process.

 

The error returned on the PC was:

The task sequence execution engine failed executing the action (Release State Store) in the group (USMT Capture) with the error code 16389

Action output: anced RSA and AES Cryptographic Provider (Prototype).

Successfully set the client certificate provider to Microsoft Enhanced RSA and AES Cryptographic Provider (Prototype)

Successfully set the client certificate provider to Microsoft Enhanced RSA and AES Cryptographic Provider (Prototype)

Requesting public key information from http://server.mydomain.com:0.

Received 2164 byte response.

Verifying certificate signature.

Signature matches

Certificate is a self signed certificate. It will not be checkedfor revocation or expiration.

Successfuly retrieved public key and verified signature.

Sending SMP request to http://server.mydomain.com:0.

Received 4915 byte response.

SMP request to "http://server.mydomain.com" failed with error: E_SMPERROR_FAILURE(99)

Request to SMP 'http://server.mydomain.com' failed with error (Code 0x80004005). Trying next SMP.

OSDSMPClient finished: 0x00004005

Failed to find an SMP that can serve request after trying 4 attempts.

ExecuteStatusRequest failed (0x80004005)..

 

 

As a result of this error, no computer association was created and the migration does not show up in the admin console; however, a USMT MIG file was created.

 

I looked at the StateMigration table in the DB and found what I think is the entry for the failed migration. It does not have values for the statestore or other fields, but it does have an entry for the StateEncryptDecryptKey.

 

I am trying to manually restore the data in the MIG file using the loadstate command, but it fails when I specify the key that is in the database. The key does not appear to be in the format that typically shows in the View REcovery Information.

 

How do I use the StateEncryptDecryptKey from the database to restore the mgiration data manually?

 

Hopefully that all makes sense.

 

Thanks!

 

Jeff