MetricSign
Request Access
High severitygateway

Power BI Refresh Error:
DM_GWPipeline_UnknownError

What does this error mean?

The on-premises gateway encountered an internal error. Usually wraps a CryptographicException when the SAML signing certificate private key is inaccessible.

Common causes

  • 1SAML signing certificate is not loaded or accessible to the gateway service account
  • 2CryptographicException during SSO token generation (signing key not loaded)
  • 3Gateway service account lacks permissions on the certificate private key
  • 4A gateway component crashed and the root cause is in a nested InnerType field
  • 5Kerberos or SAML SSO misconfiguration on the gateway server

How to fix it

  1. 1Inspect the full gateway log — the InnerType and InnerMessage fields contain the actual error
  2. 2If InnerType=CryptographicException, verify the SAML or Kerberos certificate is installed in the correct certificate store
  3. 3Grant the gateway service account read access to the private key of the signing certificate
  4. 4For SAML SSO: re-run the gateway configuration wizard and re-upload the certificate
  5. 5Restart the gateway service after any certificate change: net stop PBIEgwService && net start PBIEgwService

Other gateway errors