Hi Sanjeeth, Are you performing the toolkit encryption using the same java installation that’s running the NiFi server?
If not, you may be running into problems because of encryption limitations on the java version on your NiFi server. I think AES256 needs the “Unlimited Strength Encryption” policy and that may not be enabled (or even allowed to be enabled in your country). If you run the toolkit with the same java installation as the server, you can verify this. It should either use aes/gcm/128 or give the same error if it tries to use aes/gcm/256. Another thing to check is whether you’re using Java 8-251 or newer as the migration guidance states. Regards, Isha Van: sanjeet rath <[email protected]> Verzonden: woensdag 4 mei 2022 17:09 Aan: [email protected] Onderwerp: Re: Nifi 1.16.1 migration failed for encrypted of sensitive values Thanks Pierre for the quick response. I have followed the same doc and this is the 3rd version upgrade I am doing for nifi. Actually if u see the last line of the error it looks like aes/gcm/256 is not supported. So if you could point something I am doing wrong for this specific 1.16.1 version then it would be really helpful for me. Thanks, Sanjeet On Wed, 4 May 2022 at 8:20 PM, Pierre Villard <[email protected]<mailto:[email protected]>> wrote: Hi, I recommend reading the migration guidance documentation: https://cwiki.apache.org/confluence/display/NIFI/Migration+Guidance<https://eur03.safelinks.protection.outlook.com/?url=https%3A%2F%2Fcwiki.apache.org%2Fconfluence%2Fdisplay%2FNIFI%2FMigration%2BGuidance&data=05%7C01%7Cisha.lamboo%40virtualsciences.nl%7Ca6cf25040df64db1d3c908da2de0058f%7C21429da9e4ad45f99a6fcd126a64274b%7C0%7C0%7C637872737450174797%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7C&sdata=GMsVs2HdwuGzny9ty2yfXgr0593suh0l1ULuErpvWlw%3D&reserved=0> HTH, Pierre Le mer. 4 mai 2022 à 16:46, sanjeet rath <[email protected]<mailto:[email protected]>> a écrit : Hi , I am facing one issue in migration from 1.12 to 1.16.1 . I have created one 1.16.1 cluster.And copied flow.xml , authoriser and authorisation user file my previous 1.12 version of cluster to this new cluster. When I am starting the cluster with all the keystone password in authoriser and loginidentifer and nifi sensitive key value unencrypted in nifi properties file. Then cluster came without any issue. When I am encrypting using keytool , all the properties are succefully encrypted. How ever while starting the cluster getting one error Error in creating bean with name ‘authoriser’ factory bean threw exception on object creation nested exception is org.apache.nifi.project. Senstivepropertyprotectionexception: protection scheme [aes/gcm/256] is not supported. Any hint is really helpful as trying from last 2 days. Thanks and regards Sanjeet -- Sanjeet Kumar Rath, mob- +91 8777577470 -- Sanjeet Kumar Rath, mob- +91 8777577470
