Sym Agent service will not start. Error in logs, "Failed to initialize agent storage: Object already exists"

Products

• IT Management Suite

Issue/Introduction

The Symantec Management Agent service fails to start and the error in the agent.log file is:

Failed to initialize agent storage: Object already exists

Environment

ITMS 8.x

Cause

Security permissions do not allow the SYSTEM account to read and write files in folder where the MS Crypto API stores the RSA keys.

Resolution

1. Ensure that the SYSTEM account has READ/WRITE access to the following folders under C:\ProgramData\Microsoft\Crypto\RSA:

MachineKeys and S-1-5-18

NOTE: Older operating systems may have this information at this location: C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA

2. You may be required to rename the S-1-5-18 folder in order to get the agent to start.

3. Start the Symantec Management Agent service.

4. If you renamed the S-1-5-18 folder, check and see that a new file has been recreated by the OS.