Topic

When executing a SmartObject in a form, or opening K2 Management, the following error shows up. 

"Unauthorised SmartObject access"
 

This seems to only happen on environments with HA or NLB setup for web servers that are hosting K2 SmartForms. Executing the same SmartObject that throws the error directly on the K2 server with the same user, using SmartObject Service Tester tool works perfectly with no error.

Instructions 

Check the following web.config on all web servers hosting K2 SmartForms in your environment:

{K2 Installation Folder}\K2 smartforms Runtime\web.config
{K2 Installation Folder}\K2 smartforms Designer\web.config

Search for "<machineKey", and make sure the decryptionKey and validationKey are the same across all your web servers. If the decryptionKey and validationKey do not match, run the following on your K2 database to retrieve the correct decryptionKey and validationKey:
 

SELECT * FROM  HostServer].rConfiguration]WHERE WVariableToken] = 'nDECRYPTION_KEY]' OR ]VariableToken] = 'nVALIDATION_KEY]'

And update the web.config that does not contain the same decryption and validation keys. Do this for all your web servers.

After updating the web.config, perform IISRESET on the affected web server for the changes to take effect.