dosubot[bot] commented on issue #36107: URL: https://github.com/apache/superset/issues/36107#issuecomment-3529656692
<!-- Answer --> Yes, the errors you're seeing—especially "Invalid decryption key" and the UnicodeDecodeError—are directly related to the SECRET_KEY being different between environments. Superset uses SECRET_KEY to encrypt sensitive data like database credentials; if you export from one environment and import into another with a different key, decryption fails and you get these errors. Superset does not require the same SECRET_KEY across environments by default, but for migrations involving encrypted data, the keys must match or you must follow the secret key rotation process to re-encrypt secrets with the new key before migrating ([details](https://github.com/apache/superset/issues/33595), [discussion](https://github.com/apache/superset/discussions/23598)). For migration, you have two main options: - Temporarily set the SECRET_KEY in the target environment to match the source, perform the import, then rotate the key if needed. - Omit sensitive fields (like passwords) from the export and re-enter them manually after import. For better error details, use your browser's developer tools (F12) to inspect the network response from the import API—this often contains more specific error messages than the UI dialog ([example](https://github.com/apache/superset/issues/26130)). Also, check your backend logs, which capture stack traces and detailed error info. If you need to rotate the secret key, Superset supports a process where you set PREVIOUS_SECRET_KEY and SECRET_KEY in your config and run `superset re-encrypt-secrets` to re-encrypt stored secrets ([instructions](https://github.com/apache/superset/issues/31884)). This is the only way to migrate encrypted data between environments with different keys without data loss. Let me know if you want a step-by-step for the secret key rotation or more details on logging! <!-- Dosu Comment Footer --> *To reply, just mention [@dosu](https://go.dosu.dev/dosubot).* --- <sup>How did I do? [Good](https://app.dosu.dev/response-feedback/333cbb73-8b23-4aaf-8a54-a3dcb14d850e?feedback_type=great_response) | [Irrelevant](https://app.dosu.dev/response-feedback/333cbb73-8b23-4aaf-8a54-a3dcb14d850e?feedback_type=irrelevant_answer) | [Incorrect](https://app.dosu.dev/response-feedback/333cbb73-8b23-4aaf-8a54-a3dcb14d850e?feedback_type=incorrect_sources) | [Verbose](https://app.dosu.dev/response-feedback/333cbb73-8b23-4aaf-8a54-a3dcb14d850e?feedback_type=too_verbose) | [Hallucination](https://app.dosu.dev/response-feedback/333cbb73-8b23-4aaf-8a54-a3dcb14d850e?feedback_type=hallucination) | [Report 🐛](https://app.dosu.dev/response-feedback/333cbb73-8b23-4aaf-8a54-a3dcb14d850e?feedback_type=bug_report) | [Other](https://app.dosu.dev/response-feedback/333cbb73-8b23-4aaf-8a54-a3dcb14d850e?feedback_type=other)</sup> [](https://app.dosu.dev/a28d3c7e-a9d3-459e-9fb6-3a6f9ff4f357/ask?utm_source=githu b) [](https://go.dosu.dev/discord-bot) [](https://twitter.com/intent/tweet?text=%40dosu_ai%20helped%20me%20solve%20this%20issue!&url=https%3A//github.com/apache/superset/issues/36107) -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected] --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
