FIX: SMK initialization fails on one node of a SQL Server 2012, 2014, or 2016 failover cluster

When you use a SQL Server failover cluster, you may receive the following error message in the SQL Server error log after you start SQL Server 2012 or SQL Server 2014 or 2016:

Service Master Key could not be decrypted using one of its encryptions. See sys.key_encryptions for details.

Additionally, you receive the following error message when you create a certificate or try to open an existing database service master key (SMK):

Msg 15581, Level 16, State 7 Please create a master key in the database or open the master key in the session before performing this operation.

This issue was first fixed in the following cumulative update for SQL Server:
Recommendation: Install the latest cumulative update for SQL Server

Each new cumulative update for SQL Server contains all the hotfixes and all the security fixes that were included in the previous cumulative update. Check out the latest cumulative updates for SQL Server:

Note You can find information about the latest SQL Server builds from Where to find information about the latest SQL Server builds.
Microsoft has confirmed that this is a problem in the Microsoft products that are listed in the "Applies to" section.


Article ID: 3132062 - Last Review: 07/26/2016 08:41:00 - Revision: 6.0

Microsoft SQL Server 2012 Service Pack 2, Microsoft SQL Server 2014 Service Pack 1, Microsoft SQL Server 2014 Developer, Microsoft SQL Server 2014 Enterprise, Microsoft SQL Server 2014 Standard, Microsoft SQL Server 2016 Developer, Microsoft SQL Server 2016 Enterprise, Microsoft SQL Server 2016 Enterprise Core, Microsoft SQL Server 2016 Standard

  • kbqfe kbfix kbsurveynew kbexpertiseadvanced KB3132062