Client may receive the following two errors:
“Error Creating Key File for User "xxx". Status = 0x7885” when adding a user to a device in SES 7.1 console.
“The user has been successfully assigned to the device but auto generation of Keyfile failed due to the following error
Keyfile for the user must be created manually now.
Error number 7885
SDConnex Processing Error
Please contact your administrator and check SDConnex event log for more details”
Symptom:
This error does not occur on the SES server but rather on the SES console installed on the administrator’s own Windows device. If the administrator directly connects to the SES Server and attempts to add a user to a device, it works without issue.
Probable Causes:
In previous SES versions, a customer would ONLY need to install the SES console on an individual device without the SecureDoc Service’s Configuration component.
However, starting with 7.1SR1, assigning a user also requires SDConnex Service to be running because it uses the SDConnex logic to send key file to the device. Since the SDConnex Service is not installed on the device it produces the error 0x7885.
The task would be completed, if the administrator were to apply the second command, "Right click and create key file". This will uses the SES logic to send key file to the device.
Product version affected:
The new logic was implemented in 7.1SR1 and newer
Environment (OS/hardware/software):
Windows 7/10 OS but is not reported from Server environment
Environment would be SES console installed on any Windows platform without SDConnex.
Work Around:
This workaround is intended for client who has only SES console installed on their individual device. Starting with SES 7.1SR1 and newer, client will need to execute two commands to successfully add the user and keyfile to the device from the SES console.
Step 1: Right click on the device and select “Add users to device”.
(please ignore the error and click OK)
Step 2: Right click on the user and select "Right click and create key file".
Limitation:
This was introduced in 7.1 SR1 as part of the key file generation changes. It was intended to restrict database access to SDConnex only and prevent same code logics in both the SES Windows console and SDConnex.
References:
Please refer to 7.1SR2a Release Notes
SD-17873