SharePoint 2016 Secure Store Master Key Bug

In SharePoint 2016, it is currently not possible to generate a Master Key with the June 2017 through August 2017 PU. Attempting to generate a Master Key will lead to the below error.

ULS will show the following.

PowerShell will yield a similar set of errors.

There is currently no known workaround in SharePoint 2016. However, you can create a Secure Store Service Application in SharePoint 2013, set the Master Key, then upgrade the database to SharePoint 2016. In SharePoint 2016, refreshing the Master Key will function correctly.


  1. My only workaround for this was…

    – Add Farm Account to local Admin
    – logon with Farm Account
    – Open Central Administration Website
    – Create an Secure Master Key (for me this works)
    – log off and remove Farm Account from Admin Group

  2. sorry I forgot to tell you my version. My workaround worked with SharePoint 2016 and July 2017 Update

Leave a Reply