KV Store failed in Windows.

Applicability

Splunk Enterprise 9.0.2 Windows OS

Description

The Windows instance is showing KVstore failure messages in the Web interface. After reviewing mongod.log file and found the error " F - [main] Fatal Assertion 50755 at src\mongo\util\net\ssl_manager_windows.cpp 1609".  

Investigation

When running the following command,  

show kvstore-status 

this output is displayed: 

port : 8191
standalone : 1
status : failed
storageEngine : wiredTiger

At mongod.log the error below is found:  

2023-03-01T20:50:50.659Z W NETWORK [main] sslCipherConfig parameter is not supported with Windows SChannel and is ignored.
2023-03-01T20:50:50.660Z W NETWORK [main] sslCipherConfig parameter is not supported with Windows SChannel and is ignored.
2023-03-01T20:50:50.660Z F NETWORK [main] The provided SSL certificate is expired or not yet valid.
2023-03-01T20:50:50.660Z F - [main] Fatal Assertion 50755 at src\mongo\util\net\ssl_manager_windows.cpp 1609
2023-03-01T20:50:50.660Z F - [main] \n\n***aborting after fassert() failure\n\n

Or this error:

F CONTROL [main] Failed global initialization: InvalidSSLConfiguration: Could not read private key attached to the selected certificate, ensure it exists and check the private key permissions

This command will show you the expiration date of the certificate:

$SPLUNK_HOME/bin/splunk cmd openssl x509 -enddate -noout -in <PATH TO CERTIFICATE>

This is the default directory for certificates:

$SPLUNK_HOME/etc/auth/

Resolution

To fix the error that causes mongod to terminate, perform the next steps:

1. Open Windows certificate management MMC for the local computer
2. Navigate to Personal > Certificates
3. Delete any entries named SplunkServerDefaultCert
4. Restart Splunk

After following these steps, no errors should be found and the status of the KVstore will change to ready

Related Links

Troubleshoot KVstore
 

Revision History

Revision	Publish Date	Comments
1.0	30-Sep-2026	Initial Release