Skip to main content
cancel
Showing results for 
Search instead for 
Did you mean: 

Calling all Data Engineers! Fabric Data Engineer (Exam DP-700) live sessions are back! Starting October 16th. Sign up.

Reply
mcaraballo
Advocate III
Advocate III

How to decrypt gateway credentials

Hi everyone!

 

Based on the DirectQuery for Power BI datasets and Azure Analysis Services functionality that was introduced in the October 2021 release, I am having a problem in the power bi service when I try to add the gateway for the new connection. 

When I am prompted to enter the username and password, there is a sentence that says "The credentials are encrypted using the key stored on-premises on the gateway server".

Capture.PNG

I don´t know how to obtain those credentials in order to add the gateway.

 

Does anyone know how to do it? 

 

Thanks in advance for your help!

 

 

 

1 ACCEPTED SOLUTION
v-kkf-msft
Community Support
Community Support

Hi @mcaraballo ,

 

The credentials you need to enter for this SSAS data source should be the SSAS Instance administrator (note that it needs to be a domain account).

 

vkkfmsft_0-1638776400364.png

 

This phrase means that:


"The credentials are encrypted using the key stored on-premises on the gateway server".

When a user enters data source credentials in the Power BI service UI, the credentials are encrypted with the public key in the browser. The gateway decrypts the credentials using the RSA private key, then the gateway will use your credentials to connect to the data source to query the data. And re-encrypts them with an AES symmetric key before the data is stored in the Power BI service. With this process, the Power BI service never has access to the unencrypted data.

 

If the problem is still not resolved, please provide detailed error information or the expected result you expect. Let me know immediately, looking forward to your reply.

Best Regards,
Winniz

If this post helps, then please consider Accept it as the solution to help the other members find it more quickly.

View solution in original post

1 REPLY 1
v-kkf-msft
Community Support
Community Support

Hi @mcaraballo ,

 

The credentials you need to enter for this SSAS data source should be the SSAS Instance administrator (note that it needs to be a domain account).

 

vkkfmsft_0-1638776400364.png

 

This phrase means that:


"The credentials are encrypted using the key stored on-premises on the gateway server".

When a user enters data source credentials in the Power BI service UI, the credentials are encrypted with the public key in the browser. The gateway decrypts the credentials using the RSA private key, then the gateway will use your credentials to connect to the data source to query the data. And re-encrypts them with an AES symmetric key before the data is stored in the Power BI service. With this process, the Power BI service never has access to the unencrypted data.

 

If the problem is still not resolved, please provide detailed error information or the expected result you expect. Let me know immediately, looking forward to your reply.

Best Regards,
Winniz

If this post helps, then please consider Accept it as the solution to help the other members find it more quickly.

Helpful resources

Announcements
FabCon Global Hackathon Carousel

FabCon Global Hackathon

Join the Fabric FabCon Global Hackathon—running virtually through Nov 3. Open to all skill levels. $10,000 in prizes!

September Power BI Update Carousel

Power BI Monthly Update - September 2025

Check out the September 2025 Power BI update to learn about new features.

FabCon Atlanta 2026 carousel

FabCon Atlanta 2026

Join us at FabCon Atlanta, March 16-20, for the ultimate Fabric, Power BI, AI and SQL community-led event. Save $200 with code FABCOMM.

Top Solution Authors
Top Kudoed Authors