none
Where to find WFEncryptedEncryptionToken/CertificateThumbprint RRS feed

  • Question

  • I was manually adding things to my Microsoft.Workflow.ServiceHost.exe.config file and I accidentally overwrote the following keys :

    - WFEncryptedEncryptionToken
    - WFTokenEncryptionCertificateThumbprint

    The new values no longer match my machine.  As a result I the service Workflow Manager Backend service won't start

    How can I retrieve the old values?  Are they in the machine's certificate store or in the WF Manager databases somewhere?

    Any help would be very much appreciated.

    Thanks,

    Rod

    Monday, June 9, 2014 1:15 PM

Answers

  • I know that you can get the certificate thumbprint from the certificate itself as it should be installed in the LocalComputer\Personal\Certificates store. (http://technet.microsoft.com/en-us/library/aa997890(v=exchg.80).aspx)

    As for the WFEncryptedEncryptionToken I am not sure where you can get that from. You could try removing the host and re-adding it using the power shell cmdlets which if I am correct should update the config file you modified?

    • Remove-WFHost http://msdn.microsoft.com/en-us/library/jj193263(v=azure.10).aspx
    • Add-WFHost http://msdn.microsoft.com/en-us/library/jj193261(v=azure.10).aspx

    Example Add-WFHost:

    $credentials = Get-Credential -UserName '<RunAsUser>' -Message 'Input WorkFlow Manager RunAs Credentials'
    Add-WFHost -WFFarmDBConnectionString 'Data Source=<DatabaseServer>;Initial Catalog=WFManagementDB;Integrated Security=True;Encrypt=False' -RunAsPassword $credentials.Password -EnableFirewallRules $true -SBClientConfiguration $SBClientConfiguration -Verbose;

    Hope that helps.

    Craig

    • Marked as answer by RodDaSilva Thursday, June 12, 2014 1:30 PM
    Monday, June 9, 2014 3:21 PM

All replies

  • I know that you can get the certificate thumbprint from the certificate itself as it should be installed in the LocalComputer\Personal\Certificates store. (http://technet.microsoft.com/en-us/library/aa997890(v=exchg.80).aspx)

    As for the WFEncryptedEncryptionToken I am not sure where you can get that from. You could try removing the host and re-adding it using the power shell cmdlets which if I am correct should update the config file you modified?

    • Remove-WFHost http://msdn.microsoft.com/en-us/library/jj193263(v=azure.10).aspx
    • Add-WFHost http://msdn.microsoft.com/en-us/library/jj193261(v=azure.10).aspx

    Example Add-WFHost:

    $credentials = Get-Credential -UserName '<RunAsUser>' -Message 'Input WorkFlow Manager RunAs Credentials'
    Add-WFHost -WFFarmDBConnectionString 'Data Source=<DatabaseServer>;Initial Catalog=WFManagementDB;Integrated Security=True;Encrypt=False' -RunAsPassword $credentials.Password -EnableFirewallRules $true -SBClientConfiguration $SBClientConfiguration -Verbose;

    Hope that helps.

    Craig

    • Marked as answer by RodDaSilva Thursday, June 12, 2014 1:30 PM
    Monday, June 9, 2014 3:21 PM
  • Thank-you very much!
    Thursday, June 12, 2014 1:30 PM