Join the #BuildWithBuildAgent Challenge! Get recognized, earn exclusive swag, and inspire the ServiceNow Community with what you can build using Build Agent.  Join the Challenge.

Developer Instance Problems

Stephen Conley
Tera Contributor

Hey there;

I was trying to link my Studio instance to a GIT Respository and no matter what I do, it says my credentials are bad.

When I look in my logs, I have MANY errors about KMF.  These errors are happening all the time, which makes me think my KMF is screwed up somehow.  Here's a sample:

HMAC validation failed for: 0eef3e7073321010fa4be27bcaf6a72c : com.glide.kmf.AKMFKeyRegistry$KeyRegistryException: Error while computing HMAC for key id: 0eef3e7073321010fa4be27bcaf6a72c, registry: class com.glide.kmf.LocalRegistryWrapper, message: Could not retrieve hmac key from com.glide.kmf.KMFInstanceKeyRegistry: com.glide.kmf.AKMFKeyRegistry$KeyRegistryException: Error while computing HMAC for key id: 0eef3e7073321010fa4be27bcaf6a72c, registry: class com.glide.kmf.LocalRegistryWrapper, message: Could not retrieve hmac key from com.glide.kmf.KMFInstanceKeyRegistry: com.glide.kmf.AKMFKeyRegistry.validateHmac(AKMFKeyRegistry.java:377)
com.glide.kmf.KMFModuleKeyRegistry.getKeyById(KMFModuleKeyRegistry.java:158)
com.glide.kmf.KMFModuleKeyRegistry.getKeyByType(KMFModuleKeyRegistry.java:85)
com.glide.kmf.KMFOutputBaseBuilder.getKMFOutputObject(KMFOutputBaseBuilder.java:112)
com.glide.kmf.KMFOutputStringBuilder.apply(KMFOutputStringBuilder.java:22)
com.glide.kmf.KMFGlideEncrypter.decrypt(KMFGlideEncrypter.java:180)
com.glide.util.Encrypter.decrypt(Encrypter.java:105)
com.glide.script.glide_elements.GlideElementPassword2.getDecryptedValue(GlideElementPassword2.java:114)
com.glide.notification.Configuration.<init>(Configuration.java:61)
com.glide.notification.inbound.POP3Reader.<init>(POP3Reader.java:104)
com.glide.notification.inbound.EmailReader.getEmailReader(EmailReader.java:126)
com.glide.notification.inbound.EmailReader.getEmailReader(EmailReader.java:112)
com.glide.email_accounts.EmailReaderJob.readEmailAccountsSerially(EmailReaderJob.java:110)
com.glide.email_accounts.EmailReaderJob.execute(EmailReaderJob.java:93)
com.glide.schedule.JobExecutor.lambda$executeJob$0(JobExecutor.java:129)
com.glide.schedule.JobExecutor.executeJob(JobExecutor.java:132)
com.glide.schedule.JobExecutor.execute(JobExecutor.java:116)
com.glide.schedule_v2.SchedulerWorkerThread.executeJob(SchedulerWorkerThread.java:338)
com.glide.schedule_v2.SchedulerWorkerThread.lambda$process$0(SchedulerWorkerThread.java:220)
com.glide.worker.TransactionalWorkerThread.executeInTransaction(TransactionalWorkerThread.java:35)
com.glide.schedule_v2.SchedulerWorkerThread.process(SchedulerWorkerThread.java:220)
com.glide.schedule_v2.SchedulerWorkerThread.run(SchedulerWorkerThread.java:101)

The errors are mostly variants around this HMAC error or something like this:

Failure getting key from the KMF. Key ID: 1b87ad2073321010fa4be27bcaf6a730, Error: com.glide.kmf.commons.CryptoOperationException: Error decrypting key bytes, key not present.: com.glide.kmf.commons.CryptoOperationException: Error decrypting key bytes, key not present.: com.glide.kmf.KMFFormattedKeyUnwrappingOperation.decryptKeyBytes(KMFFormattedKeyUnwrappingOperation.java:56)
com.glide.kmf.LocalRegistryWrapper.unwrapKey(LocalRegistryWrapper.java:41)
com.glide.kmf.AKMFKeyRegistry.getKeyById(AKMFKeyRegistry.java:117)
com.glide.kmf.KMFInstanceKeyRegistry.getKeyByType(KMFInstanceKeyRegistry.java:245)
com.glide.kmf.KMFInstanceKeyRegistry.getKeyByType(KMFInstanceKeyRegistry.java:224)
com.glide.kmf.LocalRegistryHMACGenerator.computeHMAC(LocalRegistryHMACGenerator.java:30)
com.glide.kmf.AKMFKeyRegistry.validateHmac(AKMFKeyRegistry.java:366)
com.glide.kmf.KMFModuleKeyRegistry.getKeyById(KMFModuleKeyRegistry.java:158)
com.glide.kmf.KMFModuleKeyRegistry.getKeyByType(KMFModuleKeyRegistry.java:85)
com.glide.kmf.KMFOutputBaseBuilder.getKMFOutputObject(KMFOutputBaseBuilder.java:112)
com.glide.kmf.KMFOutputStringBuilder.apply(KMFOutputStringBuilder.java:22)
com.glide.kmf.KMFGlideEncrypter.decrypt(KMFGlideEncrypter.java:180)
com.glide.util.Encrypter.decrypt(Encrypter.java:105)
com.glide.script.glide_elements.GlideElementPassword2.getDecryptedValue(GlideElementPassword2.java:114)
com.glide.notification.Configuration.<init>(Configuration.java:61)
com.glide.notification.inbound.POP3Reader.<init>(POP3Reader.java:104)
com.glide.notification.inbound.EmailReader.getEmailReader(EmailReader.java:126)
com.glide.notification.inbound.EmailReader.getEmailReader(EmailReader.java:112)
com.glide.email_accounts.EmailReaderJob.readEmailAccountsSerially(EmailReaderJob.java:110)
com.glide.email_accounts.EmailReaderJob.execute(EmailReaderJob.java:93)
com.glide.schedule.JobExecutor.lambda$executeJob$0(JobExecutor.java:129)
com.glide.schedule.JobExecutor.executeJob(JobExecutor.java:132)
com.glide.schedule.JobExecutor.execute(JobExecutor.java:116)
com.glide.schedule_v2.SchedulerWorkerThread.executeJob(SchedulerWorkerThread.java:338)
com.glide.schedule_v2.SchedulerWorkerThread.lambda$process$0(SchedulerWorkerThread.java:220)
com.glide.worker.TransactionalWorkerThread.executeInTransaction(TransactionalWorkerThread.java:35)
com.glide.schedule_v2.SchedulerWorkerThread.process(SchedulerWorkerThread.java:220)
com.glide.schedule_v2.SchedulerWorkerThread.run(SchedulerWorkerThread.java:101)

 

So ... fine.  I try to reset my instance and start fresh, however neither "Release Instance" nor "Reset and Wipe Instance" do *anytihng* .. I tried to Reset and Wipe on Friday but it's still there.  I tried to Release Instance today, and it did literally nothing when I clicked the button.

I'm totally stuck here -- I don't want to develop on an instance that I can't link to Git for obvious reasons, but it seems my KMF is broken in a way that I'm not allowed to fix and I'm not able to get a new instance.

Any help?

1 ACCEPTED SOLUTION

Allen Andreas
Tera Patron

Hi,

The ServiceNow Dev team won't respond/assist on the forums and it's suggested that you submit a case using the "Give Feedback" button at the bottom of the Developer Site.

find_real_file.png

Please mark reply as Helpful/Correct, if applicable. Thanks!


Please consider marking my reply as Helpful and/or Accept Solution, if applicable. Thanks!

View solution in original post

3 REPLIES 3

Allen Andreas
Tera Patron

Hi,

The ServiceNow Dev team won't respond/assist on the forums and it's suggested that you submit a case using the "Give Feedback" button at the bottom of the Developer Site.

find_real_file.png

Please mark reply as Helpful/Correct, if applicable. Thanks!


Please consider marking my reply as Helpful and/or Accept Solution, if applicable. Thanks!

Chris Ceravolo
Kilo Contributor

I've wasted an entire day tracking down this same issue.  I turned off MFA in GitHub. I've tried using RSA and ECDSA keys. I've tried using basic authentication and Personal Access Tokens.  Nothing has had any impact.  Attaching to a GIT repo should be a complete slam dunk.  This is incredibly frustrating.

Hi Chris - Were you able to get to the bottom of this?

I am facing a similar situation at the moment. Thanks.

 

Cheers,

Sravan