Cortex XSOAR Live backup fails with 401 Unauthorized error
1865
Created On 10/21/24 13:27 PM - Last Modified 08/11/25 19:24 PM
Symptom
- When Cortex XSOAR attempts to Live backup, it fails with 401 Unauthorized error followed by "DR authorization header does not equal configured key" from the logs as shown below.
Live Backup encountered the following errors: [this host] - [master] Failed live back on remote server [401], [{"id":"unauthorized","status":401,"title":"Unauthorized","detail":"The request requires authorization","error":"DR authorization header does not equal configured key [<redacted encrypted key>]","encrypted":false,"multires":null}
"{}"
] [2025-02-01 00:00:00 +0000 UTC] Failed live back on remote server [401], [{"id":"unauthorized","status":401,"title":"Unauthorized","detail":"The request requires authorization","error":"DR authorization header does not equal configured key [<redacted encrypted key>]","encrypted":false,"multires":null}
"{}"
] [2025-03-01 00:00:00 +0000 UTC] Failed live back on remote server [401], [{"id":"unauthorized","status":401,"title":"Unauthorized","detail":"The request requires authorization","error":"DR authorization header does not equal configured key [<redacted encrypted key>]","encrypted":false,"multires":null}
{"id":"errLiveBackupCriticalError","status":444,"title":"DR Backup server critical error","detail":"Error handling DR action, DR authenticity jeopardized","error":"A critical error occurred on the backup server, DB is corrupted. Please recopy and restart servers. (12002)","encrypted":false,"multires":null}
];
Environment
- Cortex XSOAR 6.x
Cause
- The error message 'DR authorization header does not equal configured key' is typically encountered when the disaster recovery copy is not performed correctly.
- This can occur when the database and folders are copied before the configuration is saved or re-saved.
Resolution
- Reconfigure the DR server from the scratch by following the steps in the article Configure the Live Backup Environment.
Additional Information
- Refer Disaster Recovery and Live Backup to know more details on how Live Backup enables you to mirror your production server to a backup server.