# Fleet: Unable to decrypt attribute "fleet\_enroll\_username"

**URL:** https://discuss.elastic.co/t/fleet-unable-to-decrypt-attribute-fleet-enroll-username/272082
**Category:** Kibana
**Tags:** fleet
**Created:** [May 4, 2021, 3:03pm UTC](https://discuss.elastic.co/t/fleet-unable-to-decrypt-attribute-fleet-enroll-username/272082 "2021-05-04T15:03:26Z")
**Posts on this page:** 6
**Page:** 1

<div class="post-metadata">

### Author: ![BenB196](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/benb196/32/83401_2.png) [@BenB196](https://discuss.elastic.co/u/BenB196)
#### Post date: [May 4, 2021, 3:03pm UTC](https://discuss.elastic.co/t/fleet-unable-to-decrypt-attribute-fleet-enroll-username/272082/1 "2021-05-04T15:03:27Z")

</div>

Hi All,

I ran into this bug: [Ingest Management: Failed to decrypt "fleet\_enroll\_username" attribute · Issue #68750 · elastic/kibana · GitHub](https://github.com/elastic/kibana/issues/68750), and was wondering if anyone knows how to fix this?

The encryption key changed at some point, I've since added a static encryption key but I was unable to find a way to properly fix this issue.

---

<div class="post-metadata">

### Author: ![nchaulet](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/nchaulet/32/77896_2.png) [@nchaulet](https://discuss.elastic.co/u/nchaulet)
#### Post date: [May 4, 2021, 3:19pm UTC](https://discuss.elastic.co/t/fleet-unable-to-decrypt-attribute-fleet-enroll-username/272082/2 "2021-05-04T15:19:52Z")

</div>

Hi @BenB196

If the encryption key changed you probably will have the delete the Saved Object that fleet use for settings (you will have the revisit the Fleet app in Kibana and reconfigure it after)

Probably something like

```
POST .kibana/_delete_by_query
{
  "query": {
    "bool": {
      "must": [
        {
          "terms": {
            "type": [
              "ingest_manager_settings"
            ]
          }
        }
      ]
    }
  }
}
```

---

<div class="post-metadata">

### Author: ![BenB196](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/benb196/32/83401_2.png) [@BenB196](https://discuss.elastic.co/u/BenB196)
#### Post date: [May 4, 2021, 4:49pm UTC](https://discuss.elastic.co/t/fleet-unable-to-decrypt-attribute-fleet-enroll-username/272082/3 "2021-05-04T16:49:53Z")

</div>

@nchaulet I tried running the command you provided and got the following output:

```auto
#! this request accesses system indices: [.kibana_7.12.1_001], but in a future major version, direct access to system indices will be prevented by default
{
  "took" : 13,
  "timed_out" : false,
  "total" : 1,
  "deleted" : 1,
  "batches" : 1,
  "version_conflicts" : 0,
  "noops" : 0,
  "retries" : {
    "bulk" : 0,
    "search" : 0
  },
  "throttled_millis" : 0,
  "requests_per_second" : -1.0,
  "throttled_until_millis" : 0,
  "failures" : []
}

```

However, it doesn't appear to have worked, as when I go back to the fleet screen I continue to see the same error.

---

<div class="post-metadata">

### Author: ![nchaulet](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/nchaulet/32/77896_2.png) [@nchaulet](https://discuss.elastic.co/u/nchaulet)
#### Post date: [May 4, 2021, 5:58pm UTC](https://discuss.elastic.co/t/fleet-unable-to-decrypt-attribute-fleet-enroll-username/272082/4 "2021-05-04T17:58:32Z")

</div>

My bad the saved object to delete here is the output one, this should do the trick

```
POST .kibana/_delete_by_query
{
  "query": {
    "bool": {
      "must": [
        {
          "terms": {
            "type": [
              "ingest-outputs"
            ]
          }
        }
      ]
    }
  }
}
```

---

<div class="post-metadata">

### Author: ![BenB196](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/benb196/32/83401_2.png) [@BenB196](https://discuss.elastic.co/u/BenB196)
#### Post date: [May 4, 2021, 6:05pm UTC](https://discuss.elastic.co/t/fleet-unable-to-decrypt-attribute-fleet-enroll-username/272082/5 "2021-05-04T18:05:57Z")

</div>

Thanks, that did it 🙂 .

---

<div class="post-metadata">

### Author: ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)
#### Post date: [June 1, 2021, 6:06pm UTC](https://discuss.elastic.co/t/fleet-unable-to-decrypt-attribute-fleet-enroll-username/272082/6 "2021-06-01T18:06:09Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
