299001 - Failed to Decrypt a Configured Credential

Agent error code #299001 indicates that the agent could not decrypt a stored secret (such as an API token or password) before using it to authenticate to a backend. Credentials are held encrypted and decrypted only at the moment they are needed; this error means that decryption step failed, so the operation could not proceed. The specific cause is recorded in the agent log; the user-facing message is intentionally generic and does not name the backend or the underlying error.

This is distinct from a backend rejecting the credential: with #299001 the request never reaches the backend, because the credential could not be prepared on the agent side.

Common causes include:

• The agent's encryption keys were rotated or changed after the credential was saved, so the stored value can no longer be decrypted
• A configuration was copied between servers with different encryption keys
• The stored credential value was corrupted or only partially saved

Steps to Resolve

Re-save the Credentials

1. Open the affected integration in the Knocknoc admin interface
2. Re-enter the secret (API token, password, etc.) and save, so it is encrypted again with the current keys
3. Re-run the integration's validation checks, if available, to confirm the agent can now authenticate

Confirm the Agent and Server Match

1. Confirm the agent is connected to the server that holds the integration configuration
2. If the configuration was migrated between deployments, re-enter any secrets on the new deployment rather than copying encrypted values across

Check the Agent Log

1. The agent log records the specific decryption failure behind this error
2. Include the relevant log lines when contacting support