I've regenerated the aek.key (see attached forum link) and now user's with inline password (dm_bof_registry, dmc_wdk_presets_owner, dm_fulltext_index_user, etc..) are unable to login.
I've been into DA, reset the password for dm_bof_registry (to the same password as before, and then saved the user) and this works.
Does this sound right? Do I need to do this password update for all inline password users?