How to check the validity period of a Data Loss Prevention detection server certificate.

Products

• Data Loss Prevention

Issue/Introduction

You have a business requirement to know the validity period of the DLP detection server certificates used to communicate with the Enforce server which you need to verify for yourself.

Resolution

You can use the Keytool to extract the certificate information by running the following command to export the certificate information to a certificate file via command:  

C:\SymantecDLP\jre\bin\keytool -exportcert -rfc -alias vontu_enforce -keystore <input_file> > <output_file>

For example: 

C:\SymantecDLP\jre\bin\keytool -exportcert -rfc -alias vontu_enforce -keystore C:\monitor.Tue_Nov_24_15_47_33_UTC_2015.sslKeyStore > C:\monitor.Tue_Nov_24_15_47_33_UTC_2015.cer

 When prompted for a password just hit Enter

 
You can then open the exported Certificate .cer file in your system and view in the General tab the validity period which by default (v12.5) is approximately 35 years.