Cortex XSOAR Live backup fails with 401 Unauthorized error

Cortex XSOAR Live backup fails with 401 Unauthorized error

1865
Created On 10/21/24 13:27 PM - Last Modified 08/11/25 19:24 PM


Symptom


  • When Cortex XSOAR attempts to Live backup, it fails with 401 Unauthorized error followed by "DR authorization header does not equal configured key" from the logs as shown below.
Live Backup encountered the following errors: [this host] - [master] Failed live back on remote server [401], [{"id":"unauthorized","status":401,"title":"Unauthorized","detail":"The request requires authorization","error":"DR authorization header does not equal configured key [<redacted encrypted key>]","encrypted":false,"multires":null}
"{}"
] [2025-02-01 00:00:00 +0000 UTC] Failed live back on remote server [401], [{"id":"unauthorized","status":401,"title":"Unauthorized","detail":"The request requires authorization","error":"DR authorization header does not equal configured key [<redacted encrypted key>]","encrypted":false,"multires":null}
"{}"
] [2025-03-01 00:00:00 +0000 UTC] Failed live back on remote server [401], [{"id":"unauthorized","status":401,"title":"Unauthorized","detail":"The request requires authorization","error":"DR authorization header does not equal configured key [<redacted encrypted key>]","encrypted":false,"multires":null}
{"id":"errLiveBackupCriticalError","status":444,"title":"DR Backup server critical error","detail":"Error handling DR action, DR authenticity jeopardized","error":"A critical error occurred on the backup server, DB is corrupted. Please recopy and restart servers. (12002)","encrypted":false,"multires":null}
];


Environment


  • Cortex XSOAR 6.x


Cause


  • The error message 'DR authorization header does not equal configured key' is typically encountered when the disaster recovery copy is not performed correctly.
  • This can occur when the database and folders are copied before the configuration is saved or re-saved.


Resolution


 



Additional Information




Actions
  • Print
  • Copy Link

    https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA14u000000PQjoCAG&lang=en_US&refURL=http%3A%2F%2Fknowledgebase.paloaltonetworks.com%2FKCSArticleDetail

Choose Language