Cannot request cryptocontainer. Win32 error:Keyset as registered is invalid
Challenge
A Veeam Agent for Microsoft Windows backup job completes with the following warnings:
Cannot request cryptocontainer. Win32 error:Keyset as registered is invalid.
and
SQL VSS Writer is missing: databases will be backed up in crash-consistent state and transaction log processing will be skipped.
Cause
When running a backup job, Veeam Agent for Microsoft Windows (VAW) attempts to access its own cryptocontainer, which is used to encrypt data during application processing, such as for Microsoft SQL Server and Microsoft SharePoint.
The error indicates that VAW couldn't open or use the system cryptocontainer because it is corrupted. Since this cryptocontainer is only used by VAW and not shared between backup job runs, it can be safely deleted. VAW will automatically create a new cryptocontainer during the next backup job.
Solution
- Navigate to the following folder:
C:\ProgramData\Microsoft\Crypto\RSA\S-1-5-18.
- Find the file starting with "
68e41226d2329edba7db5af088869546" and move it to another folder, such as C:\Temp\ (using cut-and-paste or copy-and-delete). - Rerun the job now that the previous cryptocontainer file is no longer in the folder.
- If the job succeeds, delete the spare file moved in step 2.
If this KB article did not resolve your issue or you need further assistance with Veeam software, please create a Veeam Support Case.
To submit feedback regarding this article, please click this link: Send Article Feedback
To report a typo on this page, highlight the typo with your mouse and press CTRL + Enter.
Spelling error in text
Thank you!
Your feedback has been received and will be reviewed.
KB Feedback/Suggestion
This form is only for KB Feedback/Suggestions, if you need help with the software open a support case
Thank you!
Your feedback has been received and will be reviewed.
Oops! Something went wrong.
Please, try again later.