Developer Instance Problems

Stephen Conley
Tera Contributor

Hey there;

I was trying to link my Studio instance to a GIT Respository and no matter what I do, it says my credentials are bad.

When I look in my logs, I have MANY errors about KMF.  These errors are happening all the time, which makes me think my KMF is screwed up somehow.  Here's a sample:

HMAC validation failed for: 0eef3e7073321010fa4be27bcaf6a72c : com.glide.kmf.AKMFKeyRegistry$KeyRegistryException: Error while computing HMAC for key id: 0eef3e7073321010fa4be27bcaf6a72c, registry: class com.glide.kmf.LocalRegistryWrapper, message: Could not retrieve hmac key from com.glide.kmf.KMFInstanceKeyRegistry: com.glide.kmf.AKMFKeyRegistry$KeyRegistryException: Error while computing HMAC for key id: 0eef3e7073321010fa4be27bcaf6a72c, registry: class com.glide.kmf.LocalRegistryWrapper, message: Could not retrieve hmac key from com.glide.kmf.KMFInstanceKeyRegistry: com.glide.kmf.AKMFKeyRegistry.validateHmac(AKMFKeyRegistry.java:377)
com.glide.kmf.KMFModuleKeyRegistry.getKeyById(KMFModuleKeyRegistry.java:158)
com.glide.kmf.KMFModuleKeyRegistry.getKeyByType(KMFModuleKeyRegistry.java:85)
com.glide.kmf.KMFOutputBaseBuilder.getKMFOutputObject(KMFOutputBaseBuilder.java:112)
com.glide.kmf.KMFOutputStringBuilder.apply(KMFOutputStringBuilder.java:22)
com.glide.kmf.KMFGlideEncrypter.decrypt(KMFGlideEncrypter.java:180)
com.glide.util.Encrypter.decrypt(Encrypter.java:105)
com.glide.script.glide_elements.GlideElementPassword2.getDecryptedValue(GlideElementPassword2.java:114)
com.glide.notification.Configuration.<init>(Configuration.java:61)
com.glide.notification.inbound.POP3Reader.<init>(POP3Reader.java:104)
com.glide.notification.inbound.EmailReader.getEmailReader(EmailReader.java:126)
com.glide.notification.inbound.EmailReader.getEmailReader(EmailReader.java:112)
com.glide.email_accounts.EmailReaderJob.readEmailAccountsSerially(EmailReaderJob.java:110)
com.glide.email_accounts.EmailReaderJob.execute(EmailReaderJob.java:93)
com.glide.schedule.JobExecutor.lambda$executeJob$0(JobExecutor.java:129)
com.glide.schedule.JobExecutor.executeJob(JobExecutor.java:132)
com.glide.schedule.JobExecutor.execute(JobExecutor.java:116)
com.glide.schedule_v2.SchedulerWorkerThread.executeJob(SchedulerWorkerThread.java:338)
com.glide.schedule_v2.SchedulerWorkerThread.lambda$process$0(SchedulerWorkerThread.java:220)
com.glide.worker.TransactionalWorkerThread.executeInTransaction(TransactionalWorkerThread.java:35)
com.glide.schedule_v2.SchedulerWorkerThread.process(SchedulerWorkerThread.java:220)
com.glide.schedule_v2.SchedulerWorkerThread.run(SchedulerWorkerThread.java:101)

The errors are mostly variants around this HMAC error or something like this:

Failure getting key from the KMF. Key ID: 1b87ad2073321010fa4be27bcaf6a730, Error: com.glide.kmf.commons.CryptoOperationException: Error decrypting key bytes, key not present.: com.glide.kmf.commons.CryptoOperationException: Error decrypting key bytes, key not present.: com.glide.kmf.KMFFormattedKeyUnwrappingOperation.decryptKeyBytes(KMFFormattedKeyUnwrappingOperation.java:56)
com.glide.kmf.LocalRegistryWrapper.unwrapKey(LocalRegistryWrapper.java:41)
com.glide.kmf.AKMFKeyRegistry.getKeyById(AKMFKeyRegistry.java:117)
com.glide.kmf.KMFInstanceKeyRegistry.getKeyByType(KMFInstanceKeyRegistry.java:245)
com.glide.kmf.KMFInstanceKeyRegistry.getKeyByType(KMFInstanceKeyRegistry.java:224)
com.glide.kmf.LocalRegistryHMACGenerator.computeHMAC(LocalRegistryHMACGenerator.java:30)
com.glide.kmf.AKMFKeyRegistry.validateHmac(AKMFKeyRegistry.java:366)
com.glide.kmf.KMFModuleKeyRegistry.getKeyById(KMFModuleKeyRegistry.java:158)
com.glide.kmf.KMFModuleKeyRegistry.getKeyByType(KMFModuleKeyRegistry.java:85)
com.glide.kmf.KMFOutputBaseBuilder.getKMFOutputObject(KMFOutputBaseBuilder.java:112)
com.glide.kmf.KMFOutputStringBuilder.apply(KMFOutputStringBuilder.java:22)
com.glide.kmf.KMFGlideEncrypter.decrypt(KMFGlideEncrypter.java:180)
com.glide.util.Encrypter.decrypt(Encrypter.java:105)
com.glide.script.glide_elements.GlideElementPassword2.getDecryptedValue(GlideElementPassword2.java:114)
com.glide.notification.Configuration.<init>(Configuration.java:61)
com.glide.notification.inbound.POP3Reader.<init>(POP3Reader.java:104)
com.glide.notification.inbound.EmailReader.getEmailReader(EmailReader.java:126)
com.glide.notification.inbound.EmailReader.getEmailReader(EmailReader.java:112)
com.glide.email_accounts.EmailReaderJob.readEmailAccountsSerially(EmailReaderJob.java:110)
com.glide.email_accounts.EmailReaderJob.execute(EmailReaderJob.java:93)
com.glide.schedule.JobExecutor.lambda$executeJob$0(JobExecutor.java:129)
com.glide.schedule.JobExecutor.executeJob(JobExecutor.java:132)
com.glide.schedule.JobExecutor.execute(JobExecutor.java:116)
com.glide.schedule_v2.SchedulerWorkerThread.executeJob(SchedulerWorkerThread.java:338)
com.glide.schedule_v2.SchedulerWorkerThread.lambda$process$0(SchedulerWorkerThread.java:220)
com.glide.worker.TransactionalWorkerThread.executeInTransaction(TransactionalWorkerThread.java:35)
com.glide.schedule_v2.SchedulerWorkerThread.process(SchedulerWorkerThread.java:220)
com.glide.schedule_v2.SchedulerWorkerThread.run(SchedulerWorkerThread.java:101)

 

So ... fine.  I try to reset my instance and start fresh, however neither "Release Instance" nor "Reset and Wipe Instance" do *anytihng* .. I tried to Reset and Wipe on Friday but it's still there.  I tried to Release Instance today, and it did literally nothing when I clicked the button.

I'm totally stuck here -- I don't want to develop on an instance that I can't link to Git for obvious reasons, but it seems my KMF is broken in a way that I'm not allowed to fix and I'm not able to get a new instance.

Any help?

1 ACCEPTED SOLUTION

Allen Andreas
Administrator
Administrator

Hi,

The ServiceNow Dev team won't respond/assist on the forums and it's suggested that you submit a case using the "Give Feedback" button at the bottom of the Developer Site.

find_real_file.png

Please mark reply as Helpful/Correct, if applicable. Thanks!


Please consider marking my reply as Helpful and/or Accept Solution, if applicable. Thanks!

View solution in original post

3 REPLIES 3

Allen Andreas
Administrator
Administrator

Hi,

The ServiceNow Dev team won't respond/assist on the forums and it's suggested that you submit a case using the "Give Feedback" button at the bottom of the Developer Site.

find_real_file.png

Please mark reply as Helpful/Correct, if applicable. Thanks!


Please consider marking my reply as Helpful and/or Accept Solution, if applicable. Thanks!

Chris Ceravolo
Kilo Contributor

I've wasted an entire day tracking down this same issue.  I turned off MFA in GitHub. I've tried using RSA and ECDSA keys. I've tried using basic authentication and Personal Access Tokens.  Nothing has had any impact.  Attaching to a GIT repo should be a complete slam dunk.  This is incredibly frustrating.

Hi Chris - Were you able to get to the bottom of this?

I am facing a similar situation at the moment. Thanks.

 

Cheers,

Sravan