After restoring the databases to a new test database server, configuring the new test Reporting Services server and restoring the encryption key from the 2008 version, we are getting an error for which I haven't been able to find a resolution.  The encrypted data for the data sources is accessible, reports execute properly and subscriptions execute properly but the My Subscriptions page shows this error:


The report server was unable to validate the integrity of encrypted data in the database. (rsCannotValidateEncryptedData)


SSRS log

crypto!WindowsService_0!2a64!01/30/2015-14:39:58:: i INFO: Exporting public key

crypto!WindowsService_0!2a64!01/30/2015-14:39:58:: e ERROR: ExportPublicKey failed: System.Runtime.InteropServices.COMException (0x8009000B): Key not valid for use in specified state. (Exception from HRESULT: 0x8009000B)

   at System.Runtime.InteropServices.Marshal.ThrowExceptionForHRInternal(Int32 errorCode, IntPtr errorInfo)

   at RSManagedCrypto.RSCrypto.ExportPublicKey()

   at Microsoft.ReportingServices.Diagnostics.SymmetricKeyEncryption.GetPublicKey_Locked()

   at Microsoft.ReportingServices.Diagnostics.SymmetricKeyEncryption.GetPublicKey()

library!WindowsService_0!2a64!01/30/2015-14:39:58:: e ERROR: Throwing Microsoft.ReportingServices.Diagnostics.Utilities.CannotValidateEncryptedDataException: , Microsoft.ReportingServices.Diagnostics.Utilities.CannotValidateEncryptedDataException: The report server was unable to validate the integrity of encrypted data in the database.;

library!WindowsService_0!2a64!01/30/2015-14:39:58:: e ERROR: ServiceStartThread: Exception caught while starting service. Error: Microsoft.ReportingServices.Diagnostics.Utilities.CannotValidateEncryptedDataException:  The report server was unable to validate the integrity of encrypted data in the database. library!WindowsService_0!2a64!01/30/2015-14:39:58:: e ERROR: ServiceStartThread: Attempting to start service again... 


The report server is unable to decrypt and use any data that is encrypted with the current key. To work around this issue. 

Backup a key

 select into keys_backup from keys

Delete a key

Delete from keys where machine=’ ‘ 

Then delete from cmd. as mention in following

The following two steps illustrate how to delete encryption keys using the Reporting Services Configuration Tool or the rskeymgmt utility.

  1. Using the Reporting Services Configuration Tool
    1. Start the Reporting Services Configuration tool, and then connect to the report server instance you want to configure.
    2. Click Encryption Keys, and then click Delete. Click OK.
    3. Restart the Report Server Windows Service.
  2. Using the rskeymgmt utility
    1. Run rskeymgmt.exe locally on the computer that hosts the report server. Use the following syntax: rskeymgmt –d
    2. Restart the Report Server Windows Service.

To re-specify encrypted values, you need to retype the connection string for each data source and retype the user name and password for each data source that uses stored credentials.