# ENCRYPTION UNAVAILABLE

Canonical page: https://docs.ovok.com/errors/encryption-unavailable

**HTTP 503.** Stable Problem Details type: [`https://docs.ovok.com/errors/encryption-unavailable`](https://docs.ovok.com/errors/encryption-unavailable).

## What this means [#what-this-means]

This server cannot encrypt a secret, so provider configuration was not saved. Clients should branch on `type` and `status`, not on human-readable `detail` text.

## Troubleshooting [#troubleshooting]

Ask a deployment administrator to check encryption-key availability without sharing key material. Do not resend secrets until the service is ready. Compare the request with the relevant endpoint's documentation and confirm the authenticated project and environment. Record the request path and `traceId` before escalating; the identifier lets an administrator find server-side context without sharing credentials or patient data.

## Related endpoint guidance [#related-endpoint-guidance]

Use these pages to check the route, project settings, and request requirements associated with this error:

- [Set up email](/email-templates/set-up-email)
- [Email troubleshooting](/email-templates/troubleshooting)

## Retry safely [#retry-safely]

For a 5xx response, wait for `Retry-After` when present and retry with bounded backoff. Before replaying a write, read the affected resource or operation state to avoid duplicate effects. Follow endpoint-specific idempotency and concurrency guidance. Do not retry in a tight loop or use a broader permission or project setting to bypass the check.

## If the problem persists [#if-the-problem-persists]

Share the HTTP status, problem `type`, request path, response timestamp, and `traceId` with your administrator or support contact. Remove access tokens, provider secrets, and sensitive patient data from the report. The [Error responses guide](/errors) explains the response fields, while the [machine-code registry](/errors/machine-codes) lists every endpoint-specific type audited for this release.