Skip to main content
cancel
Showing results for 
Search instead for 
Did you mean: 

Register now to learn Fabric in free live sessions led by the best Microsoft experts. From Apr 16 to May 9, in English and Spanish.

Reply
mcaraballo
Advocate III
Advocate III

How to decrypt gateway credentials

Hi everyone!

 

Based on the DirectQuery for Power BI datasets and Azure Analysis Services functionality that was introduced in the October 2021 release, I am having a problem in the power bi service when I try to add the gateway for the new connection. 

When I am prompted to enter the username and password, there is a sentence that says "The credentials are encrypted using the key stored on-premises on the gateway server".

Capture.PNG

I don´t know how to obtain those credentials in order to add the gateway.

 

Does anyone know how to do it? 

 

Thanks in advance for your help!

 

 

 

1 ACCEPTED SOLUTION
v-kkf-msft
Community Support
Community Support

Hi @mcaraballo ,

 

The credentials you need to enter for this SSAS data source should be the SSAS Instance administrator (note that it needs to be a domain account).

 

vkkfmsft_0-1638776400364.png

 

This phrase means that:


"The credentials are encrypted using the key stored on-premises on the gateway server".

When a user enters data source credentials in the Power BI service UI, the credentials are encrypted with the public key in the browser. The gateway decrypts the credentials using the RSA private key, then the gateway will use your credentials to connect to the data source to query the data. And re-encrypts them with an AES symmetric key before the data is stored in the Power BI service. With this process, the Power BI service never has access to the unencrypted data.

 

If the problem is still not resolved, please provide detailed error information or the expected result you expect. Let me know immediately, looking forward to your reply.

Best Regards,
Winniz

If this post helps, then please consider Accept it as the solution to help the other members find it more quickly.

View solution in original post

1 REPLY 1
v-kkf-msft
Community Support
Community Support

Hi @mcaraballo ,

 

The credentials you need to enter for this SSAS data source should be the SSAS Instance administrator (note that it needs to be a domain account).

 

vkkfmsft_0-1638776400364.png

 

This phrase means that:


"The credentials are encrypted using the key stored on-premises on the gateway server".

When a user enters data source credentials in the Power BI service UI, the credentials are encrypted with the public key in the browser. The gateway decrypts the credentials using the RSA private key, then the gateway will use your credentials to connect to the data source to query the data. And re-encrypts them with an AES symmetric key before the data is stored in the Power BI service. With this process, the Power BI service never has access to the unencrypted data.

 

If the problem is still not resolved, please provide detailed error information or the expected result you expect. Let me know immediately, looking forward to your reply.

Best Regards,
Winniz

If this post helps, then please consider Accept it as the solution to help the other members find it more quickly.

Helpful resources

Announcements
Microsoft Fabric Learn Together

Microsoft Fabric Learn Together

Covering the world! 9:00-10:30 AM Sydney, 4:00-5:30 PM CET (Paris/Berlin), 7:00-8:30 PM Mexico City

PBI_APRIL_CAROUSEL1

Power BI Monthly Update - April 2024

Check out the April 2024 Power BI update to learn about new features.

April Fabric Community Update

Fabric Community Update - April 2024

Find out what's new and trending in the Fabric Community.

Top Solution Authors
Top Kudoed Authors