VIP Microsoft Credential Provider Error: System cannot contact validation server, or validation server is down

Products

• VIP Service

Issue/Introduction

After installing VIP Microsoft Credential Provider, users see the error System cannot contact validation server, or validation server is down when trying to log into the server: 

Windows Event logs error for Source: SymantecCredentialProvider:

Radius client initialization failed Provider [VSRadiusClient] can't configure auth channel [W839.example.com:1812:] -- VSRadiusConfigureAuthChannel returned: -5

Environment

VIP Enterprise Gateway

Cause

The validation server is not reachable. This may happen if the destination IP address is incorrect or a DNS Name is configured but it is not resolving properly.

Local or network firewall rules may also block connectivity. 

Resolution

Use an IP Address rather than DNS name in the Validation Server registry destination setting. 

Registry: HKLM\SOFTWARE\Symantec\CP:
LoginDomainFieldId (DWORD): 9
Retries (String): 5
Time Out (String): 10
Validation Server (String): VIP_EG_IPAddress:PORT:camouflaged_secret

sample:

To test connectivity from the server to the VIP EG, use the 'vsradiusclient_test' utility.