Issue with legacy encryptor when restoring old CloudStack DB on new management setup

[midhunpjos]

We are facing an issue related to the legacy encryptor while setting up a new CloudStack management server using an old database backup, and would like to check if anyone has encountered a similar scenario.
We were using an older CloudStack installation(4.18.1) that relied on the legacy encryptor.
Unfortunately, the original cloud DB user password was not recorded.
We faced a database crash, we restored the CloudStack database from a backup.

After restoration:

A new cloud DB user was created with a new password.
A fresh CloudStack management server was installed.
New encryption keys were generated during the installation using cloudstack-setup-databases and encryptor version as v1
The database connection is successful, and CloudStack services start normally. As per logs ACS is able to connect to hypervisors and system VM's
Both dbkey and mgmtkey were set to the default values that were used in the old installation.

Issue:

User authentication is successful (login does not fail).
However, after login:
The API responses return empty values.
The UI does not populate expected data.

We tested using CloudMonkey:

API key synchronization is successful.
API calls execute without error, but responses are still empty.

What could be the possible reason for this?

[rajujith]

@midhunpjos since you are using v1 encryptor and able to start and login I don't think there is an issue with encryption. The API responses are empty for all APIs or specific APIs.
The hosts,SystemVMs are connected, so you can list them correctly, I hope.
Do you see any errors in the logs for the API calls? Tried enabling TRACE logs?

[midhunpjos]

Thanks for the response. the api response is empty for most api's, but for "cloudianIsEnabled", "listApis" getting responses
sample api response logs:

2026-01-13 05:37:32,093 INFO [a.c.c.a.ApiServlet] (qtp592959754-14:ctx-4a6b5be6) (logid:a27d48b6) 192.168.199.44 -- POST command=login domain=/
2026-01-13 05:37:32,640 INFO [a.c.c.a.ApiServlet] (qtp592959754-19:ctx-65bc6ed0 ctx-eae90a0e) (logid:aa0ff04f) (userId=2 accountId=2 sessionId=node012q6k3ccnroecr8cxpkzmbf4q8) 192.168.199.44 -- GET username=admin&command=listUsers&response=json&sessionkey=CQf9o-_Or_avV66LAYfdtc4LNfE 200 {"listusersresponse":{}}
2026-01-13 05:37:32,643 INFO [a.c.c.a.ApiServlet] (qtp592959754-20:ctx-b1146322 ctx-439eaf63) (logid:350d4a64) (userId=2 accountId=2 sessionId=node012q6k3ccnroecr8cxpkzmbf4q8) 192.168.199.44 -- GET command=listLdapConfigurations&response=json&sessionkey=CQf9o-_Or_avV66LAYfdtc4LNfE 200 {"ldapconfigurationresponse":{}}
2026-01-13 05:37:32,648 INFO [a.c.c.a.ApiServlet] (qtp592959754-14:ctx-b1290540 ctx-a64c1b77) (logid:811316b2) (userId=2 accountId=2 sessionId=node012q6k3ccnroecr8cxpkzmbf4q8) 192.168.199.44 -- GET command=listCapabilities&response=json&sessionkey=CQf9o-_Or_avV66LAYfdtc4LNfE 200 {"listcapabilitiesresponse":{"capability":{"securitygroupsenabled":false,"dynamicrolesenabled":true,"cloudstackversion":"4.18.2.5","userpublictemplateenabled":true,"supportELB":"false","projectinviterequired":false,"allowusercreateprojects":true,"customdiskofferingminsize":1,"customdiskofferingmaxsize":1024,"regionsecondaryenabled":false,"kvmsnapshotenabled":false,"allowuserviewdestroyedvm":true,"allowuserexpungerecovervm":true,"allowuserexpungerecovervolume":true,"allowuserviewalldomainaccounts":false,"kubernetesserviceenabled":false,"kubernetesclusterexperimentalfeaturesenabled":false,"defaultuipagesize":20,"instancesstatsretentiontime":1,"instancesstatsuseronly":false,"instancesdisksstatsretentionenabled":false,"instancesdisksstatsretentiontime":720}}}