Forum Discussion

rootmout's avatar
rootmout
Copper Contributor
Nov 04, 2024

Intune issue on Ubuntu 24.04

Hello,

 

I installed Intune on Ubuntu 24.04 after a distro upgrade. The install went fine but the identity provider agent report the "Unable to derive key material as unable to find the derivation key for alias" error.

 

Full trace:

 

 

 

journalctl -u microsoft-identity-device-broker.service

[...]

nov 01 14:49:33 my-laptop microsoft-identity-device-broker[21822]: E/DeviceBrokerServiceOperation:generateDerivedKey: [2024-11-01 13:49:33 - thread_id: 17, correlation_id: ************************* - ] Unable to derive key material as unable to find the derivation key for alias: <redacted>

nov 01 14:49:33 my-laptop microsoft-identity-device-broker[21822]: com.microsoft.identity.common.java.exception.ClientException: Unable to derive key material as unable to find the derivation key for alias: <redacted>

nov 01 14:49:33 my-laptop microsoft-identity-device-broker[21822]: at com.microsoft.identity.device.broker.operation.DeviceBrokerServiceOperation.generateDerivedKey(DeviceBrokerServiceOperation.java:173)

nov 01 14:49:33 my-laptop microsoft-identity-device-broker[21822]: at com.microsoft.identity.broker.dbus.services.impl.DeviceBrokerDBusV1Impl.generateDerivedKey(DeviceBrokerDBusV1Impl.java:212)

nov 01 14:49:33 my-laptop microsoft-identity-device-broker[21822]: at jdk.internal.reflect.GeneratedMethodAccessor5.invoke(Unknown Source)

nov 01 14:49:33 my-laptop microsoft-identity-device-broker[21822]: at java.base/jdk.internal.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)

nov 01 14:49:33 my-laptop microsoft-identity-device-broker[21822]: at java.base/java.lang.reflect. Method.invoke(Method.java:566)

nov 01 14:49:33 my-laptop microsoft-identity-device-broker[21822]: at org.freedesktop.dbus.connections.AbstractConnection$2.run(AbstractConnection.java:816)

nov 01 14:49:33 my-laptop microsoft-identity-device-broker[21822]: at java.base/java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1128)

nov 01 14:49:33 my-laptop microsoft-identity-device-broker[21822]: at java.base/java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:628)

nov 01 14:49:33 my-laptop microsoft-identity-device-broker[21822]: at java.base/java.lang.Thread.run(Thread.java:829)

 

 

 

 

I know that in theory its not supported on 24.04 but I have some contact who managed the app to work, they just didn't had that error.

Does anyone know what the error mean?

 

Ive already tried to uninstall all intune component + wiped the folders I found on my machine without success...

3 Replies

    • mrossw's avatar
      mrossw
      Copper Contributor

      Hi alejandrolorite , actually after a new attempt I got this working. Those are the steps I followed :


      sudo apt remove microsoft-identity-broker
      sudo apt purge microsoft-identity-broker
      sudo apt remove intune-portal
      sudo apt purge intune-portal 

          Delete directories for intune and identity-provider in your home directories: `.cache`, `.config`, `.local` (do not delete those dir entirely or you may loose some configs for other apps) 

      sudo apt install intune-portal
      systemctl --user daemon-reload
      journalctl --follow 

      After that I started seeing an error about folder permission in the journalctl output. Intune was not able to create the soft link ~/.local/state/logmicrosoft-identity-broker -> ../../../.config/log/microsoft-identity-broker. So I tried giving write permission the this .config folder and I finally get to the screen with the register button in Intune

  • mrossw's avatar
    mrossw
    Copper Contributor

    I am having the same problem. Does anyone have any info to share ? rootmout did you get through it ?

Resources