Passphrase Snapshot recovery to short (12 characters )

[EugenR]

Hello, we have a snapshot passphrase with 12 characters on our EPO server. Because of OS migration we wanted to reinstall EPO. (EPO5100_ServicePack1_4098_LR1) However, during the installation a passphrase with min 14 characters is required. Is it possible to override this requirement during the installation. Otherwise the snapshot can not be decrypted. Thanks

[cdinet]

What update version are you restoring the server from?  You probably need the RTW version of the installer to restore with.  No, you can't override that character requirement and since you aren't meeting it currently, you probably aren't at an update level where that was required.  If that is the case, you can't use sp1 installer to restore an older version of epo.

[EugenR]

I had installed the update Version: "Service Pack 1 Update for ePolicy Orchestrator 5.10.0 Version 2.0.0.1359".

[cdinet · Accepted solution]

What I would suggest then is to first reset your passphrase under server settings for disaster recovery.  Then run another snapshot task to save that to the database and then back up your database again.  Otherwise, you can do a manual recovery per kb66616 that doesn't require the passphrase.  On that install, you can set a 14 character passphrase and once everything is restored, go back to server settings and reset that again to 14 characters since restoring the db will restore the old one.

[EugenR]

I have KB66616  already tried.

however I had there always error with "...RunDLLGenCerts..." that the connection to the console could not be established. But in the browser everything worked.

https://kcm.trellix.com/corporate/index?page=content&id=KB66616

Step 14  

Run the following command:...

Thanks I try then KB66616 again

Maybe I can post the error here soon.

[cdinet]

You would need to see what the error is when trying to regenerate the certs.  See KB90821 for troubleshooting certificate regeneration.

[EugenR]

I was able to successfully run KB66616

thanks

[cdinet]

Since you have done that, go to server settings, disaster recovery and reset your passphrase so you don't run into this again.