Looker can not start because: null (Service: AWSKMS; Status Code: 400; Error Code: InvalidCiphertextException;

Knowledge Drop

Last tested: Nov 5, 2018
 

This error is indicative of Looker trying and failing to start with new GCM encryption.

It means that this Looker is configured to use AWS Key Management Service (KMS) but KMS is unable to decrypt the stored key with the provided Customer Master Key (CMK).

Ensure that the database Looker is trying to start against is from this instance and hasn't been migrated from another host with a different CMK without doing DR backup procedure.

This content is subject to limited support.                

Version history
Last update:
‎07-07-2021 01:15 PM
Updated by: