backup and restore of CPS

Showing results for 
Search instead for 
Do you mean 
Participant II
Posts: 4
Registered: ‎12-24-2018
#1 of 2 218

backup and restore of CPS

Hi All 


One of our customer have CPS Standalone and for now want to migrate to  CPS as HA .As i understand there is no way to convert Standalone to HA . I have built a new setup with HA and now we want to migrate the config and data from old to new CPS . Kindly advise if there is any other way to do the same apart from below option as we are getting error . 


backup script on standalone running CPS which will give global.dump and atq.dump file.

restore the file on new HA CPS ...the Restore process get stuck on powershell and then once we start the IIS and open the URL in that case with URL shows certificate error and after clicking on continue it is showing INVALID HMAC SIGNATURE ERROR and it is not working at all..


below is the error . 


Invalid HMAC signature

Server Error in '/' Application.

Invalid HMAC signature

Description: An unhandled exception occurred during the execution of the current web request. Please review the stack trace for more information about the error and where it originated in the code.

Exception Details: Centrify.Cfw2.Core.Encryption.InvalidEncryptionSignatureException: Invalid HMAC signature

Source Error:

An unhandled exception was generated during the execution of the current web request. Information regarding the origin and location of the exception can be identified using the exception stack trace below.

Stack Trace:

[InvalidEncryptionSignatureException: Invalid HMAC signature]
   Centrify.Cfw2.Core.Encryption.Common.Decrypt_v5(Stream inputStream, Action`2 decryptedStreamAction, Boolean earlyOutKeyId, SymmetricEncryptionHelper helper) +1111
   Centrify.Cfw2.Core.Encryption.<>c__DisplayClass28_0.<Decrypt>b__0() +741
   Centrify.Cfw2.Core.Diagnostics.Lint.Drop(Func`1 func) +151
   Centrify.Cfw2.Core.Encryption.Common.Decrypt(Stream inputStream, Action`2 action, Boolean earlyOutKeyId, SymmetricEncryptionHelper helper) +276
   Centrify.Cfw2.Core.Encryption.Common.Decrypt(Byte[] cipher, SymmetricEncryptionHelper helper) +242
   Centrify.Cfw2.Core.Encryption.SymmetricEncryptionHelper.Decrypt(Byte[] cipher) +56
   Centrify.Cloud.Core.CryptHelper.Decrypt(Byte[] data) +144
   Centrify.Cloud.Core.Data.CertificateIO.CertificateFromRow(DataEntity certRow, X509KeyStorageFlags certFlags) +172
   Centrify.Cloud.Core.Data.CertificateIO.CertificateFromRow(DataEntity certRow) +53
   Centrify.Cloud.Core.Data.CertificateIO.GetCertificateFromThumbprint(String thumbprint, Boolean throwOnNotFound) +200
   Centrify.Cloud.Core.Data.CertificateIO.GetCertificateFromThumbprint(String thumbprint) +99
   Centrify.Cloud.Core.Pods.<>c__DisplayClass25_0.<GetIdCertForPod>b__0() +47
   Centrify.Cloud.Core.TenantContext.Switch(String newContext, Func`1 action) +107
   Centrify.Cloud.Core.Pods.Pod.GetIdCertForPod(String podName, Boolean throwOnNotFoundInvalid) +1359
   Centrify.Cloud.Core.Pods.Pod.GetIdCertForPod(String podName) +53
   Centrify.Cloud.Core.Pods.Pod..ctor(String name) +320
   Centrify.Cloud.Core.Pods.SuperPod..ctor() +50
   Centrify.Cloud.Core.Pods.PodManager..cctor() +356

[TypeInitializationException: The type initializer for 'Centrify.Cloud.Core.Pods.PodManager' threw an exception.]
   Centrify.Cloud.Core.Pods.PodManager.get_MyPod() +0
   Centrify.Cloud.Core.<>c__DisplayClass22_0.<LoadCustomErrorContent>b__0() +283
   Centrify.Cloud.Core.TenantContext.Switch(String newContext, Action action) +82
   Centrify.Cloud.Core.Branding.LoadCustomErrorContent(String errorCode) +177
   Centrify.Cloud.Core.<>c.<GetCustomErrorContent>b__23_0(String k) +47
   System.Collections.Concurrent.ConcurrentDictionary`2.GetOrAdd(TKey key, Func`2 valueFactory) +87
   Centrify.Cloud.Core.Branding.GetCustomErrorContent(Int32 httpStatusCode, Boolean fallbackToError) +457

[HttpException (0x80004005): The type initializer for 'Centrify.Cloud.Core.Pods.PodManager' threw an exception.]
   System.Web.HttpApplicationFactory.EnsureAppStartCalledForIntegratedMode(HttpContext context, HttpApplication app) +520
   System.Web.HttpApplication.RegisterEventSubscriptionsWithIIS(IntPtr appContext, HttpContext context, MethodInfo[] handlers) +176
   System.Web.HttpApplication.InitSpecial(HttpApplicationState state, MethodInfo[] handlers, IntPtr appContext, HttpContext context) +165
   System.Web.HttpApplicationFactory.GetSpecialApplicationInstance(IntPtr appContext, HttpContext context) +353
   System.Web.Hosting.PipelineRuntime.InitializeApplication(IntPtr appContext) +341

[HttpException (0x80004005): The type initializer for 'Centrify.Cloud.Core.Pods.PodManager' threw an exception.]
   System.Web.HttpRuntime.FirstRequestInit(HttpContext context) +523
   System.Web.HttpRuntime.EnsureFirstRequestInit(HttpContext context) +107
   System.Web.HttpRuntime.ProcessRequestNotificationPrivate(IIS7WorkerRequest wr, HttpContext context) +688


Version Information: Microsoft .NET Framework Version:4.0.30319; ASP.NET Version:4.7.3062.0



appreciate the response to fix this issue.

Centrify Guru I
Posts: 2,433
Registered: ‎07-26-2012
#2 of 2 216

Re: backup and restore of CPS



Welcome back to the forums.

The appropriate vehicle for this issue is Centrify support.  Centrify commercial customers have access to 24x7 support vehicles.


This being said, Evaluation mode (not stand-alone mode) has been provided to help in customer evaluations (hence the no upgrade option), I hope this was an expectation that was set early during the engagement, otherwise we are not communicating effectively.  This is also clearly spelled out in the release notes.
This means that it's quite possible that support may state that this is ot a supported scenario, especially since the config is for a "single node" being restored into a HA configuration.



Want to learn more about practical Centrify examples? Check out my blog at
Follow Centrify: