Symptoms
The Horizon Agent OS throws an error "The attempted logon is invalid. This is either due to a bad username or authentication information." when we launch a global desktop or application from the client.
Log Lines similar to the following can be seen in the destination pod connection server:
2023-10-21T06:56:02.014Z ERROR (0A1C-0E30) <MessageFrameWorkDispatch> [MessageFrameWork] KeyVault BCryptDecrypt NTSTATUS=0xC000003E, system error=23 (Data error (cyclic redundancy check).), line=1155, src=bora\apps\horizonCommon\lib\mfw\keyvault\keyvaultimplementation.cpp 2023-07-21T06:56:02.014Z DEBUG (0A1C-0E30) <MessageFrameWorkDispatch> [MessageFrameWork] KeyVaultWorker::MessageHandler(): KeyVault service got operation=decipher, ok=0, msecs=0 2023-07-21T06:56:02.014Z ERROR (0A1C-1F24) <VipaServerSlowThreadPool4-16> [AbstractLaunchVipaRequest] Could not unwrap CPA encryption key: Failed to unwrap wrapped encryption key. Message: Failed to unwrap wrapped encryption key: decipher: Error: 30000
Purpose
This article provides troubleshooting steps and identifies issues with inter-pod session launches.
Cause
Failure in decryption of sensitive data (password/pin) at the destination pod.
Impact / Risks
Interpod desktop/application session launches will fail.
Resolution
Upgrade to Horizon Server 2309 (8.11) or later.