Documentum Docbase Service failed to start

Dielson Monteiro
Dielson Monteiro Member
edited September 5 in Documentum #1

Hello Everyone.

After an upgrade of the Capital Project Content Server, the Documentum Docbase Service fails to start and displays the following error message.

Message

(

Tue Sep 03 15:51:35 2024[DM_STARTUP_I_DOCBASE_OWNER_NOT_FOUND]: The database user (USR) is not a valid NT User. This is the user specified in your server.ini file as the database_owner attribute. If you are running the optional Replication Services package you will need to create a valid NT User account for this user.
The Lockbox stable value threshold was not met because the system fingerprint has changed. To reset the system fingerprint, open the Lockbox using the passphrase.
2024-09-03T15:51:35.374000 9548[9388] 0000000000000000 [DM_CRYPTO_F_KEYSTORE_INIT]fatal: "Failed to initialize keystore at D:\Documentum\dba\secure\CSaek. Internal error - 1057226525"

)

Answers

  • Kyle Pettit
    Kyle Pettit E Community Moderator
    #2


    in my startup scripts, I also use:
    dm_crypto_boot -all -passphrase myPassphrasehere

    then in dfc.properties, check for any crypto settings that might be missing or needed. like
    dfc.crypto.repository=myDocbasenNameHere

    maybe try backing up dfc.keystore, then removing it, restart and it should recreate


    —
    Kyle Pettit
    Documentum D2 Product manager

  • Dielson Monteiro
    Dielson Monteiro Member
    #3

    Hi Kyle.

    Thanks for your help.

    I tried the script, but the error persists.

    in my startup scripts, I also use:

    the information in the dfc.properties file is

    #include D:\Documentum/config/dfc.properties
    dfc.bof.classloader.enable_extension_loader_first=false

  • Michael McCollough
    Michael McCollough E Community Moderator
    #4

    This might be something better for support to help you with. Sounds like possible IP/Hostname, etc might have change to invalidate the cryptography. If you are not using encrypted file stores, there are procedures that can be found on the internet to delete aek and re-create it.

    Overall, it may take more time in the forums to get to the bottom of it than it would take to go through support (where they can help guide). Not saying forums can't help at all by the way, just trying to ensure you get an expedited method of getting to the bottom of the problem.

Categories