Decryption failed: [WinError -2146893813] Key not valid for use in specified state. App developer may consider this guidance: https://github.com/AzureAD/microsoft-authentication-extensions-for-python/wiki/PersistenceDecryptionError

[khwajas-mfcgd]

Describe the bug

PS C:\Users\khwajas.prd> az login
Select the account you want to log in with. For more information on login with Azure CLI, see https://go.microsoft.com/fwlink/?linkid=2271136
Decryption failed: [WinError -2146893813] Key not valid for use in specified state. App developer may consider this guidance: https://github.com/AzureAD/microsoft-authentication-extensions-for-python/wiki/PersistenceDecryptionError
Please report to us via Github: #20231
PS C:\Users\khwajas.prd>

Related command

az login

Errors

PS C:\Users\khwajas.prd> az login
Select the account you want to log in with. For more information on login with Azure CLI, see https://go.microsoft.com/fwlink/?linkid=2271136
Decryption failed: [WinError -2146893813] Key not valid for use in specified state. App developer may consider this guidance: https://github.com/AzureAD/microsoft-authentication-extensions-for-python/wiki/PersistenceDecryptionError
Please report to us via Github: #20231

Issue script & Debug output

PS C:\Users\khwajas.prd> az login
Select the account you want to log in with. For more information on login with Azure CLI, see https://go.microsoft.com/fwlink/?linkid=2271136
Decryption failed: [WinError -2146893813] Key not valid for use in specified state. App developer may consider this guidance: https://github.com/AzureAD/microsoft-authentication-extensions-for-python/wiki/PersistenceDecryptionError
Please report to us via Github: #20231
PS C:\Users\khwajas.prd>

Expected behavior

az login does not work

Environment Summary

PS C:\Users\khwajas.prd> az --version
azure-cli 2.70.0 *

core 2.70.0 *
telemetry 1.1.0

Dependencies:
msal 1.31.2b1
azure-mgmt-resource 23.1.1

Python location 'C:\Program Files\Microsoft SDKs\Azure\CLI2\python.exe'
Config directory 'C:\Users\khwajas.prd.azure'
Extensions directory 'C:\Users\khwajas.prd.azure\cliextensions'

Python (Windows) 3.12.8 (tags/v3.12.8:2dc476b, Dec 3 2024, 19:30:04) [MSC v.1942 64 bit (AMD64)]

Legal docs and information: aka.ms/AzureCliLegal

Additional context

na

[azure-client-tools-bot-prd]

Hi @khwajas-mfcgd,

This is a known issue.

Please follow #20231 (comment) to get workaround.

If you feel that further discussion is needed, please add a comment with the text /clibot unresolve to reopen the issue.

[yonzhan]

Thank you for opening this issue, we will look into it.

[github-actions]

Here are some similar issues that might help you. Please check if they can solve your problem.

• Not able to login to Az Cli #24632
• Unable to log into azure using elevated powershell: Decryption failed: [WinError -2146893813] Key not valid for use in specified state #27158
• Decryption failed: [WinError -2146893813] #30314
• Az Login Issue #30073
• Decryption failed: [WinError -2146893813] Key not valid for use in specified state. #23380

---

Possible solution (Extracted from existing issue, might be incorrect; please verify carefully)

Solution 1:

The login issue was solved after following the full cleanup mentioned. Uninstalled the CLI from the control panel and manually deleted the .azure folder. Installed again using PowerShell.

Reference:

• Not able to login to Az Cli #24632 (comment)

Solution 2:

Please try not to run Azure CLI as admin. If the issue persists, you may try to disable token cache. See #20231 (comment)

Reference:

• Unable to log into azure using elevated powershell: Decryption failed: [WinError -2146893813] Key not valid for use in specified state #27158 (comment)

Powered by issue-sentinel