The Root Management Server encryption key is unavailable after you replace or reinstall the Root Management Server server in Microsoft System Center Operations Manager 2007

After you replace or reinstall the Root Management Server server in Microsoft System Center Operations Manager 2007, the Root Management Server encryption key is unavailable.

Cause 1

• The Root Management Server server was replaced or reinstalled.
• The encryption key was not backed up. Or, the password of the encryption key was lost.
• No other Management Server servers can be promoted to be Root Management Server servers.

To resolve this problem, see Resolution 1.

Cause 2

• The Root Management Server server was replaced or reinstalled.
• The encryption key was not backed up. Or, the password of the encryption key was lost.
• At least one Management Server server can be promoted to be a Root Management Server server.

To resolve this problem, see Resolution 2.

Cause 3

The server registry for the Root Management Server server was corrupted. Therefore, the encryption key was lost. To resolve this problem, see Resolution 3.

Resolution 1

1. Install a new Root Management Server server.
2. Make sure that the computer has the same name that was used for the Root Management Server server that you are replacing.

The Root Management Server Setup program will detect that the computer uses the name for the Root Management Server server that is in the database. Therefore, the Root Management Server Setup program will re-create a new encryption key and register the licenses.

Resolution 2

1. On the Management Server server that you want to promote to be the new Root Management Server server, click Start, click Run, type cmd, and then click OK.
2. At the command prompt, type msiexec.exe /i path of the MOM.msi file CREATE_NEWKEY=1, and then press ENTER.
3. Type exit, and then press ENTER to close the Command Prompt window.
4. Configure the SDK service account and the Config service account.
   
   Notes
   • The SDK service account and the Config service account must have permission to use the database.
   • You must add the SDK service account to the sdk_users role.
   • You must add the Config service account to the configsvc_users role.
5. Promote the Management Server server to be the Root Management Server server.

Resolution 3

1. On the Root Management Server server, click Start, click Run, type cmd, and then click OK.
2. At the command prompt, type msiexec.exe /i path of the MOM.msi file CREATE_NEWKEY=1, and then press ENTER.
3. Type exit, and then press ENTER to close the Command Prompt window.

For more information about how to back up encryption keys and about how to restore encryption keys in System Center Operations Manager 2007, visit the following Microsoft Web site: