# Unable to decrypt using imported aes256-gcm96 transit key

**URL:** <https://discuss.hashicorp.com/t/unable-to-decrypt-using-imported-aes256-gcm96-transit-key/60966>\
**Category:** Vault\
**Created:** [December 17, 2023, 7:03am UTC](https://discuss.hashicorp.com/t/unable-to-decrypt-using-imported-aes256-gcm96-transit-key/60966 "2023-12-17T07:03:41Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![rajeevsatya](https://sea2.discourse-cdn.com/hashicorp/user_avatar/discuss.hashicorp.com/rajeevsatya/32/39411_2.png) [@rajeevsatya](https://discuss.hashicorp.com/u/rajeevsatya)\
**Post date:** [December 17, 2023, 7:03am UTC](https://discuss.hashicorp.com/t/unable-to-decrypt-using-imported-aes256-gcm96-transit-key/60966/1 "2023-12-17T07:03:41Z")

</div>

Hi All,

I am trying a scenario, where there are 2 separate instances of vault and I need to export transit key from 1st vault instance and import it into the 2nd vault instance. I am able to successfully perform the export and import of aes256-gcm96 based transit key to the vault instances. But when i try to decrypt the ciphertext in 2nd vault instance which was encrypted by 1st vault instance, I get below error. Same is the case when I try vice-versa. Can you please let me know, what could have gone wrong?

/ $ vault write transit/decrypt/my-key ciphertext=vault:v1:fuhpOM6LWdyS8VPl…  
Error writing data to transit/decrypt/my-key: Error making API request.

URL: PUT [https://127.0.0.1:8200/v1/transit/decrypt/my-key](https://127.0.0.1:8200/v1/transit/decrypt/my-key)  
Code: 400. Errors:

- cipher: message authentication failed  
/ $

I am using Vault 13.7.

---

<div class="post-metadata">

**Author:** ![rajeevsatya](https://sea2.discourse-cdn.com/hashicorp/user_avatar/discuss.hashicorp.com/rajeevsatya/32/39411_2.png) [@rajeevsatya](https://discuss.hashicorp.com/u/rajeevsatya)\
**Post date:** [December 18, 2023, 10:56am UTC](https://discuss.hashicorp.com/t/unable-to-decrypt-using-imported-aes256-gcm96-transit-key/60966/2 "2023-12-18T10:56:35Z")

</div>

Kindly ignore. Issue was with the wrong ciphertext used for import.
