Upgrade to 12.2: grafana don't start

  • What Grafana version and what operating system are you using?

12.2. on Windiows

  • What are you trying to achieve?

  • that it startsagain

  • How are you trying to achieve it?

  • upgrade from 12.0.1.0 to 12.2.

  • What happened?

Start ends up with error:

logger=tsdb.prometheus
Error: ✗ missing configuration for current encryption provider misconfigured

Hello all,

I guess , I’ve to configure something to get it running again. But what?

Could give please some hints?

Thanks a lot…

Regards

Juergen

Fixed it: something changed in the defaults.ini.

So I took deh new one and change the needed values from the old one.

Now it works aigein

Hello,

I’m having the same issue. I have restored a full copy of VM working ok with grafana 12.2 upgraded version.

Now I’ve done a backup and restored in a new VM, and only have changed the IP adress.

When I start de grafana with the command /usr/sbin/grafana-server --homepath /usr/share/grafana, grafana dont start and shows the following messages:

[rvdas@rvdasdbhub ~]$ sudo /usr/sbin/grafana-server --homepath /usr/share/grafana
Grafana server is running with elevated privileges. This is not recommended
INFO [10-09|10:15:21] Starting Grafana logger=settings version=12.2.0 commit=92f1fba9b4b6700328e99e97328d6639df8ddc3d branch=release-12.2.0 compiled=2025-10-09T10:15:21Z
INFO [10-09|10:15:21] Config loaded from logger=settings file=/usr/share/grafana/conf/defaults.ini
INFO [10-09|10:15:21] Target logger=settings target=[all]
INFO [10-09|10:15:21] Path Home logger=settings path=/usr/share/grafana
INFO [10-09|10:15:21] Path Data logger=settings path=/usr/share/grafana/data
INFO [10-09|10:15:21] Path Logs logger=settings path=/usr/share/grafana/data/log
INFO [10-09|10:15:21] Path Plugins logger=settings path=/usr/share/grafana/data/plugins
INFO [10-09|10:15:21] Path Provisioning logger=settings path=/usr/share/grafana/conf/provisioning
INFO [10-09|10:15:21] App mode production logger=settings
INFO [10-09|10:15:21] FeatureToggles logger=featuremgmt grafanaconThemes=true prometheusAzureOverrideAudience=true lokiQuerySplitting=true onPremToCloudMigrations=true dashgpt=true grafanaAssistantInProfilesDrilldown=true azureMonitorPrometheusExemplars=true alertingNotificationsStepMode=true correlations=true alertingImportYAMLUI=true logRowsPopoverMenu=true alertingBulkActionsInUI=true panelMonitoring=true transformationsRedesign=true skipTokenRotationIfRecent=true dashboardDsAdHocFiltering=true useSessionStorageForRedirection=true alertingSaveStateCompressed=true alertingUIOptimizeReducer=true adhocFiltersInTooltips=true dataplaneFrontendFallback=true alertingQueryAndExpressionsStepMode=true tlsMemcached=true newPDFRendering=true newFiltersUI=true logsPanelControls=true publicDashboards=true addFieldFromCalculationStatFunctions=true alertingRuleRecoverDeleted=true dashboardSceneSolo=true annotationPermissionUpdate=true alertingRulePermanentlyDelete=true awsDatasourcesTempCredentials=true logsContextDatasourceUi=true improvedExternalSessionHandling=true groupToNestedTableTransformation=true cloudWatchRoundUpEndTime=true dashboardSceneForViewers=true unifiedRequestLog=true publicDashboardsScene=true ssoSettingsLDAP=true newDashboardSharingComponent=true lokiLabelNamesQueryApi=true azureMonitorEnableUserAuth=true formatString=true alertingMigrationUI=true kubernetesDashboards=true influxdbBackendMigration=true pinNavItems=true dashboardScene=true awsAsyncQueryCaching=true recordedQueriesMulti=true preinstallAutoUpdate=true cloudWatchCrossAccountQuerying=true alertRuleRestore=true logsExploreTableVisualisation=true logsInfiniteScrolling=true improvedExternalSessionHandlingSAML=true promQLScope=true alertingRuleVersionHistoryRestore=true unifiedStorageHistoryPruner=true cloudWatchNewLabelParsing=true
INFO [10-09|10:15:21] Connecting to DB logger=sqlstore dbtype=sqlite3
INFO [10-09|10:15:21] Locking database logger=migrator
INFO [10-09|10:15:21] Starting DB migrations logger=migrator
INFO [10-09|10:15:21] migrations completed logger=migrator performed=0 skipped=674 duration=460.184µs
INFO [10-09|10:15:21] Unlocking database logger=migrator
INFO [10-09|10:15:21] Envelope encryption state logger=secrets enabled=true current provider=secretKey.v1
INFO [10-09|10:15:21] Restored cache from database logger=plugin.angulardetectorsprovider.dynamic duration=478.774µs
Error: ✗ missing configuration for current encryption provider misconfigured

Can anyone help me with the problem with grafana.db?

Could be something wrong in my defaults.ini file?

Thanks in advanced !!!

Could you please share the changes you made to the.ini file so we can fix the problem? I’m having the same problem with my Windows server.

Hi,

I’ll only took the values for the server-section [server] and in the auth-section [auth.azuread] from the

old defaults.ini to the new one. The new from 12.2. worked with the database SQLITE, but only on 127.0.0.1:3000 with admin.

And I used some “smaller” settings like

allow_embedding = true

That’s it.

I believe, there are some new setting, which weren’t in the old ini. So they prevent Grafana to start.

I also tried first to copy the different settings from the new 12.2. defaults.ini to the old ini. But this wasn’t working. Perhaps, I forgot something or something was removed, which I didn’t recognize.

this is where using custom ini is good, default.ini might have changes with every release, but if you leverage custom.ini then you are in control of things

Hello, I appreciate your response.

I’m using my custom.ini file right now, which contains all of my server setup, credentials, URL, and passwords—including the security section—but when I try to use it again, I get the issue as stated above.

I’ve looked into it, and the error results in two errors:

1. Provider error

2. A secret key is needed for the security encryption portion.

Would you or anyone else be able to assist me with this?

Hi,

I took my complete defualt.ini to the custom.ini

Not only single paramters.

This way works for me fine.

1 Like

The secret_key is placed within a new configuration section. So that the encryption_provider = secret_key.v1 expects a secret_key be defined in [secrets_manager.encryption.secret_key.v1]