I just upgraded our Solarwinds from 2020.2.6 to 2023.4.2 on Wednesday. We had a hiccup this morning where the website just kept spinning. Upon looking at the logs, ever since the upgrade I noticed an ASP.NET warning in the Application Event Log. It looks to be an unhandled exception related to cryptography. The full error is below. Any ideas what would be causing this?
Log Name: Application
Source: ASP.NET 4.0.30319.0
Date: 2/2/2024 9:52:57 AM
Event ID: 1309
Task Category: Web Event
Level: Warning
Keywords: Classic
User: N/A
Computer: (SERVERNAME)
Description:
Event code: 3005 Event message: An unhandled exception has occurred. Event time: 2/2/2024 9:52:57 AM Event time (UTC): 2/2/2024 3:52:57 PM Event ID: 086ab493aa224296a770ee2dbdbf59e6 Event sequence: 600 Event occurrence: 3 Event detail code: 0 Application information: Application domain: /LM/W3SVC/2/ROOT/api2-4-133513624774338944 Trust level: Full Application Virtual Path: /api2 Application Path: E:\Program Files (x86)\SolarWinds\Orion\Web\api2\ Machine name: (SERVERNAME) Process information: Process ID: 16152 Process name: w3wp.exe Account name: IIS APPPOOL\SolarWinds Orion Application Pool Exception information: Exception type: CryptographicException Exception message: Error occurred during a cryptographic operation.
at System.Web.Security.Cryptography.HomogenizingCryptoServiceWrapper.HomogenizeErrors(Func`2 func, Byte[] input)
at System.Web.Security.Cryptography.HomogenizingCryptoServiceWrapper.Unprotect(Byte[] protectedData)
at System.Web.Security.FormsAuthentication.Decrypt(String encryptedTicket)
at SolarWinds.Orion.Api.Host.WebApiApplication.ValidateXsrfToken()
at SolarWinds.Orion.Api.Host.WebApiApplication.App_BeginRequest(Object sender, EventArgs e)
at System.Web.HttpApplication.SyncEventExecutionStep.System.Web.HttpApplication.IExecutionStep.Execute()
at System.Web.HttpApplication.ExecuteStepImpl(IExecutionStep step)
at System.Web.HttpApplication.ExecuteStep(IExecutionStep step, Boolean& completedSynchronously)
Request information: Request URL: https://(SERVERNAME).net:443/api2/swis/query?lang=en-us&swAlertOnError=false&swLogOutOnAuthError=true&viewId=1 Request path: /api2/swis/query User host address: (IP) User: Is authenticated: False Authentication Type: Thread account name: IIS APPPOOL\SolarWinds Orion Application Pool Thread information: Thread ID: 5 Thread account name: IIS APPPOOL\SolarWinds Orion Application Pool Is impersonating: False Stack trace: at System.Web.Security.Cryptography.HomogenizingCryptoServiceWrapper.HomogenizeErrors(Func`2 func, Byte[] input)
at System.Web.Security.Cryptography.HomogenizingCryptoServiceWrapper.Unprotect(Byte[] protectedData)
at System.Web.Security.FormsAuthentication.Decrypt(String encryptedTicket)
at SolarWinds.Orion.Api.Host.WebApiApplication.ValidateXsrfToken()
at SolarWinds.Orion.Api.Host.WebApiApplication.App_BeginRequest(Object sender, EventArgs e)
at System.Web.HttpApplication.SyncEventExecutionStep.System.Web.HttpApplication.IExecutionStep.Execute()
at System.Web.HttpApplication.ExecuteStepImpl(IExecutionStep step)
at System.Web.HttpApplication.ExecuteStep(IExecutionStep step, Boolean& completedSynchronously)
Custom event details:
Event Xml:
<Event xmlns="">schemas.microsoft.com/.../event">
<System>
<Provider Name="ASP.NET 4.0.30319.0" />
<EventID Qualifiers="32768">1309</EventID>
<Level>3</Level>
<Task>3</Task>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2024-02-02T15:52:57.381115400Z" />
<EventRecordID>622909</EventRecordID>
<Channel>Application</Channel>
<Computer>(SERVERNAME)</Computer>
<Security />
</System>
<EventData>
<Data>3005</Data>
<Data>An unhandled exception has occurred.</Data>
<Data>2/2/2024 9:52:57 AM</Data>
<Data>2/2/2024 3:52:57 PM</Data>
<Data>086ab493aa224296a770ee2dbdbf59e6</Data>
<Data>600</Data>
<Data>3</Data>
<Data>0</Data>
<Data>/LM/W3SVC/2/ROOT/api2-4-133513624774338944</Data>
<Data>Full</Data>
<Data>/api2</Data>
<Data>E:\Program Files (x86)\SolarWinds\Orion\Web\api2\</Data>
<Data>(SERVERNAME)</Data>
<Data>
</Data>
<Data>16152</Data>
<Data>w3wp.exe</Data>
<Data>IIS APPPOOL\SolarWinds Orion Application Pool</Data>
<Data>CryptographicException</Data>
<Data>Error occurred during a cryptographic operation.
at System.Web.Security.Cryptography.HomogenizingCryptoServiceWrapper.HomogenizeErrors(Func`2 func, Byte[] input)
at System.Web.Security.Cryptography.HomogenizingCryptoServiceWrapper.Unprotect(Byte[] protectedData)
at System.Web.Security.FormsAuthentication.Decrypt(String encryptedTicket)
at SolarWinds.Orion.Api.Host.WebApiApplication.ValidateXsrfToken()
at SolarWinds.Orion.Api.Host.WebApiApplication.App_BeginRequest(Object sender, EventArgs e)
at System.Web.HttpApplication.SyncEventExecutionStep.System.Web.HttpApplication.IExecutionStep.Execute()
at System.Web.HttpApplication.ExecuteStepImpl(IExecutionStep step)
at System.Web.HttpApplication.ExecuteStep(IExecutionStep step, Boolean& completedSynchronously)
</Data>
<Data>solarwinds.xxxxx.net:443/.../query
<Data>/api2/swis/query</Data>
<Data>(IP)</Data>
<Data>
</Data>
<Data>False</Data>
<Data>
</Data>
<Data>IIS APPPOOL\SolarWinds Orion Application Pool</Data>
<Data>5</Data>
<Data>IIS APPPOOL\SolarWinds Orion Application Pool</Data>
<Data>False</Data>
<Data> at System.Web.Security.Cryptography.HomogenizingCryptoServiceWrapper.HomogenizeErrors(Func`2 func, Byte[] input)
at System.Web.Security.Cryptography.HomogenizingCryptoServiceWrapper.Unprotect(Byte[] protectedData)
at System.Web.Security.FormsAuthentication.Decrypt(String encryptedTicket)
at SolarWinds.Orion.Api.Host.WebApiApplication.ValidateXsrfToken()
at SolarWinds.Orion.Api.Host.WebApiApplication.App_BeginRequest(Object sender, EventArgs e)
at System.Web.HttpApplication.SyncEventExecutionStep.System.Web.HttpApplication.IExecutionStep.Execute()
at System.Web.HttpApplication.ExecuteStepImpl(IExecutionStep step)
at System.Web.HttpApplication.ExecuteStep(IExecutionStep step, Boolean& completedSynchronously)
</Data>
</EventData>
</Event>
