Error: Connection failure! An encryption key for the source domain has not yet been created on this (NETIQKB52914)

fact
Domain Migration Administrator 7.2

symptom
Error: "Connection failure! An encryption key for the source domain has not yet been created on this DMA machine."

symptom
Cannot set Password Export Server in the Specify Migration Settings wizard.

cause

The DMA console and source domain are not configured with a Password Export Server (PES).

Migrating passwords from a Windows 2000 or later native-mode domain to a domain in a different forest requires installing the Password Export Server (PES) on a domain controller in the source domain. DMA uses the PES to migrate passwords between domains.

fix

Create a PES encryption key and set up a PES server in the source domain.

note

For more information about configuring password migration and setting up a PES, knowledge base article NETIQKB44293, How do I set up the Password Export Server (PES)?, at https://www.netiq.com/kb/esupport/consumer/esupport.asp?id=NETIQKB44293.

Formerly known as NETIQKB52914