Alteryx Server Knowledge Base

Definitive answers from Server experts.

'Tis the season to be spooky! Read our new blog, How Spooky is Your City? Mapping and Predicting Scary Stuff. In it, @SusanCS provides a fun glimpse into using data to figure out the creepy quotient of where you live! And don't forget to check out our Digital Costume Thread to get yourself in the mood for a candy binge!

We hope that you are as excited about this new feature as we are! The new Database Connection Share is a feature that will allow ease of access for your Alteryx users to your databases. The feature also allows the Alteryx Gallery and Database Administrators more governance over what connections are being made as well as who are making the connections.The Admin of the Gallery can create and manage their users' data connections.
View full article
Troubleshooting "Unable to translate Alias" with Gallery Data Connections
View full article
Error: "failed: CURLerror (curl_easy_perform() failed) - code=60 msg='SSL peer certificate or SSH remote key was not OK'" when running a workflow.
View full article
Running a workflow with a database connection in the Gallery in a multi-node environment gets an error despite the connection working in the controller's instance of Designer. This is caused by not having a matching DSN or driver on the worker nodes.
View full article
When the option "Allow user alias to override the system alias" in Alteryx System Settings is selected the relevant UserAlias.xml file will be used rather than the System Alias. If after a credentials or other data source configuration change only the system connection was changed the user connection will be still used and this can cause the workflow to fail running in Designer or uploading to Gallery.
View full article
Error: "[SQLState 08S01] fe_sendauth: no password supplied" when using Amazon Redshift and publishing to the Gallery.
View full article
This KB provides you with steps on connecting to a User-Managed MongoDB using Robo 3T
View full article
How to setup a SQL Server Bulk Loader Connection in Gallery.
View full article
Error: "SQL1031N The database directory cannot be found on the indicated file system. SQLSTATE=58031" when connecting to DB2 z/OS
View full article
This article details the steps and best practices for users who need to run In-DB workflows on the server
View full article
Guide to Gallery Data Connections - FAQ   Creating a Gallery Data Connection will allow ease of access for Alteryx users to connect to databases. The feature also allows the Alteryx Gallery and Database Administrators more governance over what connections are being made as well as who are making the connections.   What are the advantages of using a Gallery Data Connection?   Centralized area for Administrators to create and share database connections Avoids the need for IT to create database connections on each users machine individually Easy permissions management - access to the connections can be enabled or disabled instantly Users no longer need to know the connection information to connect to their data   What actually happens when you create the connection on the Gallery?   When you create a Gallery Data Connection, a record is created in MongoDB under the AlteryxGallery > dataConnections collection. { "_id" : ObjectId("5a5882573b910b5758cdd7e2"), "ConnectionString" : "4D35F08105015D7A81E5E274760D1C3529146D9516CACD028F1A353994C7DFB2ABAC8A99B1F284CCB7935B96F0FBD2EC9A9239B3305D4DE60D1C749C4E7BC65A597ED943742FB057EDD0F1882FFF98D6ED7888312215761DB1FA02B0EF425F9F98E645E73FB98481AC130D05F1A0CC0DBD42D4AC1F38E8DF8CA5759A6A4823F86C6FC212BD93263F83B90515DF6926B934FA086466A70992DF984C297A47C1DFFD749A642A6267B9FFC87B766127CE6C3D945FC64A8A25A2414DB2450AD6CAAD8D9202BFEBAF22C91B1371E1BA4C9CEB6E454B46B3BF4417D5280E53BCB5BE6AA734B", "PasswordSecured" : "", "ConnectionName" : "SQL_on_Gallery", "Subscriptions" : [], "Users" : [ "5a56197d3z920b5758cdd5f6", "503bac102031af71f8f8e479" ] } Once the connection is shared, it is also attached to that person's entry in AlteryxGallery > users collection. { "_id" : ObjectId("503bac145031af11f8f8e479"), "Curator" : true, "Anonymous" : false, "LicenseCurator" : false, "Sponsor" : "", "Email" : "aketchum@kantoleague.com", "FirstName" : "Ash", "LastName" : "Ketchum", ], ... ... ... "DataConnections" : [ "5baa469016ba3e2984be805e", "5bb2022216ba3e5ff4b02b38", "5baa5d0516ba3e2984be83ba", "5c1b721c16ba3e26d43ec3a8", "5bb2036b16ba3e5ff4b02be0", "5a5882573b910b5758cdd7e2", "5cfa1b39dd4214299419c703", "5b924bc516ba3e2178e41deb", "5d3f140edd421409506209a2", "5d3f1498dd421409506209a9" ], "CanSchedule" : true, "CanSetPriority" : false, "CanSetWorkerTag" : true, "RecaptchaResponse" : null }   What happens when the connection is used in Designer?   The user is authenticated. With Windows Authentication, the user who is logged into the machine/running Designer is authenticated automatically - it is not possible to change this. This means that this user must be a domain account that can authenticate to that server, and only that user's connections will be synced.  As soon as a user links their Gallery to Designer, a sync takes place that grabs all the connections they have access to and creates a file called GalleryAlias.xml in the user's* profile: C:\Users\USERNAME\AppData\Roaming\Alteryx\Engine *99% of the time this will be the user logged into the machine, but there is also the possibility that the user is right-clicking and running Designer as a different user. This file will be updated/synced when you: Open Designer. Open the Manage Data Connection window from Options > Advanced Settings > Manage Data Connections. Click Sync All in the Manage Data Connections Window:     What happens when you execute a workflow on the gallery that uses a Gallery Data Connection?     The Gallery 'translates' the connection from an XML file. One of the following will be used: GalleryAlias.xml __TemporaryAlias.xml The Gallery performs a permissions check. The permissions check ONLY applies to the user who uploaded the workflow. If the connection has not been shared with the uploader, it will error: Unable to translate alias SQL_on_Gallery The workflow is executed and the connection to the database is attempted. Any further errors will be around the connection string/driver itself, i.e. Error SQLDriverConnect: [Microsoft][ODBC Driver Manager] Data source name not found and no default driver specified.     What does 'translate the alias' mean?   This refers to the unpackaging and reading of the XML file to take the alias name (SQL_on_gallery) to the actual connection string. This must first happen before the connection to the database will even be attempted. If this fails for any reason, you get the following error:   Unable to translate alias X       What is the __TemporaryAlias.xml file, and when is it used?   When you publish a workflow to the Gallery that contains one of these connections, a file called __TemporaryAlias.xml is packaged with the workflow. You can see this file when you click Manage workflow assets during publication: By default, this asset is checked - it should be checked so that the workflow can use this XML to translate the alias. Once the workflow runs, it is pulled down and unpackaged into the Staging folder.   Which of the two XML files are used?   The Designer first will try to use the __TemporaryAlias.xml file. This is the preferred way, because as mentioned this XML file is packaged with the workflow,, meaning it can successful translate on whatever machine (worker) it runs on: If you don't package the __TemporaryAlias file, it will then try to use the GalleryAlias.xml file. As mentioned, since this is in the User's profile, you would need the Run As user to have this file synced and available in their profile. This method is not preferred. Another issue with this method is that the file will need to be synced on all worker machines.   What are the most important things to know to make sure my workflow will run successfully on the Gallery?    Always package the connection when publishing to the Gallery. From a permissions perspective, once the workflow is on the Gallery, it doesn't matter who runs the workflow for the translation to happen. Only the uploader of the workflow needs to have the connection shared with them.      
View full article
Issue    When publishing a workflow to Gallery with user credentials and you run into the following: Entering credentials has been disabled   When configuring a new Gallery Data Connection the below error comes up when attempting to test or save the connection:   Credential usage is disabled as a result of encryption configuration. Please contact your server administrator.     Environment   Alteryx Designer Alteryx Server   Diagnosis    You can verify this issue in the AlteryxService logs after a service restart. During the startup you will see a message like the following: ERROR,8912,AlteryxService,,,,,,,,"AlteryxService_InitLocalEncryptedStorage_Error: Error importing keys to Microsoft\Crypto\RSA\MachineKeys\ directory in ProgramData: Access is denied. (5)"   Cause   The Alteryx Service account has insufficient permissions to the server's machine key directory (%ProgramData%\Microsoft\Crypto\RSA\MachineKeys) or specifically the Alteryx Machine Key which is used to encrypt/decrypt user credentials and Gallery data connections.    Solution   Check your Service Log On As Account. The user set as the Log On As user (the default is Local System account) will need to have specific permissions.   Run services.msc (CTRL+R, enter services.msc, and click OK) Locate the Alteryx Service and check the Log On As account Per the server help documentation, ensure the Service Account has Full Control over  %ProgramData%\Microsoft\Crypto\RSA\MachineKeys** **If giving permissions to the full directory is not possible due to security reasons you can give it to just the Alteryx Machine key which starts with "3312". Also allowing Full Control over this machine key may fix the issue of the directory access does not. After granting permissions to the service account, restart the Alteryx Service  
View full article
Issue   When trying to enter Workflow Credentials from the Administration section of the Gallery, the credentials do not save and the message 'Validating' shows perpetually. The credentials are not saved.   You may also see this issue when trying to update the password for an existing credential.   Environment   Alteryx Server   Diagnosis   You will find the below errors in the logs:   Gallery logs: ERROR,,ErrorHandler,HandleError,,,::1,xxx-xxx,,,GET,/gallery/api/apps/pubKey/,400,14,Exception caught by ErrorHandler and marshalled to client,"AlteryxService_Client.Net.AlteryxServiceException: Credential usage is disabled as a result of encryption configuration. Please contact your server administrator.-> at AlteryxService_Client.Net.EncryptedStorageWrapper.GetPublicKeyParams(String server, String secret, String sValue)-> at Alteryx.Cloud.Server.Services.AppService.GetPublicKey()-> at SyncInvokeGetPublicKey(Object , Object[] , Object[] )-> at System.ServiceModel.Dispatcher.SyncMethodInvoker.Invoke(Object instance, Object[] inputs, Object[]& outputs)-> at System.ServiceModel.Dispatcher.DispatchOperationRuntime.InvokeBegin(MessageRpc& rpc)-> at System.ServiceModel.Dispatcher.ImmutableDispatchRuntime.ProcessMessage5(MessageRpc& rpc)-> at System.ServiceModel.Dispatcher.ImmutableDispatchRuntime.ProcessMessage11(MessageRpc& rpc)-> at System.ServiceModel.Dispatcher.MessageRpc.Process(Boolean isOperationContextSet)"   Service logs: ERROR,,AlteryxService,AlteryxService_GetPublicKeyParams,,,,,,,"CredentialHandler_ReadBody_Error: <Credential usage is disabled as a result of encryption configuration. Please contact your server administrator.>"   Cause   The Alteryx Service account has insufficient permissions to the server's machine key directory (%ProgramData%\Microsoft\Crypto\RSA\MachineKeys) or specifically the Alteryx Machine Key which is used to encrypt/decrypt user credentials and Gallery data connections.    Solution   Please see the solution in this article.   Additional Resources   How Workflow Credentials Work on a Private Gallery Troubleshooting "Invalid Username or Password" Error - Setting Up Workflow Credentials Access is Denied on the Alteryx Server
View full article
In developing workflows our users need to push workflows to server or scheduler that contain database connections.  This is a common source of errors if not configured properly.
View full article