After installing the September patches, including KB5002624, workflow is getting error "failed on start". KB5002624 has a known workflow issue. https://support.microsoft.com/en-us/topic/description-of-the-security-update-for-sharepoint-enterprise-server-2016-september-10-2024-kb5002624-db6c8b15-b9e8-4fa5-a34a-b99a0341271e You might experience an issue in which SharePoint workflows can't be published because the unauthorized type is blocked. This issue also generates event tag "c42q0" in SharePoint Unified Logging System (ULS) logs. To work around this issue, register the safe types in the Web.config file. You can look for event tag "c42q0" in ULS logs to find the blocked type. If the type and assembly are safe, add the type to the authorized list in the Web.config file. For example: <System.Workflow.ComponentModel.WorkflowCompiler> <authorizedTypes> <targetFx version="v4.0"> **<authorizedType Assembly="Microsoft.SharePoint.WorkflowActions, Version=16.0.0.0, Culture=neutral, PublicKeyToken=null" Namespace="Microsoft.SharePoint.WorkflowActions.WithKey" TypeName="*" Authorized="True" />** </targetFx> </authorizedTypes> I attempted to recompile the WF and received an error "Unexpected error on server associating the workflow". Found error c42q0 in the ULS log file: Potentially malicious xoml node: for a column with a LookupFunction . Does the recommended change need to be made to just the web.config for the SharePoint Workflow Manager? SharePoint 2016 on-premise using SharePoint Workflow Manager

Hi @ UnderwoodMarlene-1858 , Thank you for posting in this community. It is true that there is no indication in the documentation whether it is SharePoint Server Web.config or SharePoint Workflow Manager Web.config. But as far as I know, SharePoint Workflow Manager doesn't seem to have Web.config file. So, I think that since there is no special indication in the document, it should be a modification of SharePoint Server Web.config. Here are the locations of SharePoint Server Web.config : I strongly recommend that you make a backup of your files before modifying SharePoint Server Web.config to avoid problems. If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment". Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

After KB5002624, 2010 workflow is getting "failed on start" SP 2016 on-premise

UnderwoodMarlene-1858 55

After installing the September patches, including KB5002624, workflow is getting error "failed on start". KB5002624 has a known workflow issue. https://support.microsoft.com/en-us/topic/description-of-the-security-update-for-sharepoint-enterprise-server-2016-september-10-2024-kb5002624-db6c8b15-b9e8-4fa5-a34a-b99a0341271e

You might experience an issue in which SharePoint workflows can't be published because the unauthorized type is blocked. This issue also generates event tag "c42q0" in SharePoint Unified Logging System (ULS) logs. To work around this issue, register the safe types in the Web.config file. You can look for event tag "c42q0" in ULS logs to find the blocked type. If the type and assembly are safe, add the type to the authorized list in the Web.config file. For example: <System.Workflow.ComponentModel.WorkflowCompiler> <authorizedTypes>
```
<targetFx version="v4.0">         

  **<authorizedType Assembly="Microsoft.SharePoint.WorkflowActions, Version=16.0.0.0, Culture=neutral, PublicKeyToken=null" Namespace="Microsoft.SharePoint.WorkflowActions.WithKey" TypeName="*" Authorized="True" />**     

</targetFx>    
```
</authorizedTypes>

I attempted to recompile the WF and received an error "Unexpected error on server associating the workflow". Found error c42q0 in the ULS log file: Potentially malicious xoml node: for a column with a LookupFunction.

Does the recommended change need to be made to just the web.config for the SharePoint Workflow Manager?

SharePoint 2016 on-premise using SharePoint Workflow Manager

Nhật Bùi 0 Reputation points

2024-09-25T03:32:59.0133333+00:00

Thank @UnderwoodMarlene-1858 for help .

Thank you. I encountered a similar issue after installing KB5002624 . Worflow 2010 failed on start and when I publish the workflow, I encounter the error: Unexpected error on server associating the workflow

After adding '<authorizedType Assembly="Microsoft.SharePoint.WorkflowActions, Version=16.0.0.0, Culture=neutral, PublicKeyToken=null" Namespace="Microsoft.SharePoint.WorkflowActions.WithKey" TypeName="*" Authorized="True" />' to the web.config, the workflow ran and was published normally.

However, there is still an error when reviewing the workflow that has already run on the item, but it has temporarily helped while awaiting a complete fix.
UnderwoodMarlene-1858 55 Reputation points

2024-09-25T11:53:07.0333333+00:00

You're welcome. I did the same.
Ger Roe 0 Reputation points

2024-09-25T13:48:24.8966667+00:00

I am having the same issue but not seeing an event tag "c42q0" we're still having issues with our workflows.
UnderwoodMarlene-1858 55 Reputation points

2024-09-25T18:05:49.9233333+00:00

@Ger Roe It shows up in the ULS viewer on the WFE server after you try to re-publish the workflow (or where the SharePoint Workflow Manager is installed). I also searched for "Error" or the workflow name. For me, the search didn't initially return the record when I used c42q0, but I assumed I typed something wrong.
Wael M. El Kayal 0 Reputation points

2024-09-28T05:00:18.73+00:00

It`s not working with me. Can someone explain more, please? Potentially malicious xoml node: <ns1:LookupActivity ListId="{ActivityBind ROOT,Path=__list}" LookupFunction="LookupString" __Context="{ActivityBind ROOT,Path=__context}" FieldName="Title" ListItem="{ActivityBind ROOT,Path=__item}" x:Name="ID455" xmlns:x="http://schemas.microsoft.com/winfx/2006/xaml" xmlns:ns1="clr-namespace:Microsoft.SharePoint.WorkflowActions.WithKey;Assembly=Microsoft.SharePoint.WorkflowActions, Version=16.0.0.0, Culture=neutral, PublicKeyToken=null" />
UnderwoodMarlene-1858 55 Reputation points

2024-09-30T15:14:25.2466667+00:00

Wael - I had a similar error. What have you tried so far? Did you read my comment from Sep 25, 2024, 7:46 AM? I just updated it to be a little more specific.

Accepted answer

Ling Zhou_MSFT 17,135 Reputation points Microsoft Vendor

2024-09-25T02:03:15.96+00:00

Hi @UnderwoodMarlene-1858,

Thank you for posting in this community.

It is true that there is no indication in the documentation whether it is SharePoint Server Web.config or SharePoint Workflow Manager Web.config. But as far as I know, SharePoint Workflow Manager doesn't seem to have Web.config file.

So, I think that since there is no special indication in the document, it should be a modification of SharePoint Server Web.config.

Here are the locations of SharePoint Server Web.config:

I strongly recommend that you make a backup of your files before modifying SharePoint Server Web.config to avoid problems.

If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.
Please sign in to rate this answer.

1 person found this answer helpful.
UnderwoodMarlene-1858 55 Reputation points

2024-09-25T11:46:55.7466667+00:00

I updated the web.config files located in the 1st 2 bullets, which for 2 environments was 70+ files (i.e., each farm server X each web app & central admin). Added: '<authorizedType Assembly="Microsoft.SharePoint.WorkflowActions, Version=16.0.0.0, Culture=neutral, PublicKeyToken=null" Namespace="Microsoft.SharePoint.WorkflowActions.WithKey" TypeName="*" Authorized="True" />'

Then ran a ResetIIS script (https://www.sharepointdiary.com/2014/07/iisreset-all-servers-in-sharepoint-farm.html).

Then re-published the workflow.

Now I need to find all the 2010 WFs and find all the records that failed so they can be resubmitted. Is there a script to find all the 2010 WFs and all the failed records? The WF status was 'Error Occurred' (actually these may be a different issue).

It's too bad the KB notes weren't more precise so I could have found this sooner. I tested a WF after the KB install and thought everything was OK, but didn't realize the issue was specific to 2010 WFs. A script to update the web.config files would have been helpful too.
Sign in to comment

Use comments to ask for clarification, additional information, or improvements to the question.

Share via

After KB5002624, 2010 workflow is getting "failed on start" SP 2016 on-premise

0 additional answers

Your answer