Was it working before? It sounds like it's just using the wrong encryption scheme or maybe the wrong key, or both. Are you using an application server? The key will need to be stored on both application servers if you're storing the key there. Because of this, it's possible to accidentally have two different keys, one on each app server.
Try creating a new Encryption Scheme. Then at the bottom, make sure that Encryption Scheme is selected as the Default Encryption Scheme. Then create a new set of credentials. And then try using Get Credentials for those new credentials.
If that test works, then you may just need to set up your encryption scheme and key again from scratch as well as re-set up your credentials with that scheme and key. And make sure that any app servers are using that same scheme and key.
Dave Morris, 3Ci at Southern Company