Symantec Endpoint Protection Manager (SEPM) controller connection is failing on Endpoint Detection and Response (EDR) console with error:
SEPM returned a non-200 HTTP response
central_manager.log on EDR shows an authentication error:
ERROR RMI TCP Connection(512776)-127.0.0.1 (SepmCommunicatorRemoteImpl.java:validateSepm:895) Error when trying to connect to SEPM. Exception : {"errorCode":"401","appErrorCode":"","errorMessage":"Invalid user name or password. Please try again."}:name=ERROR_HTTP_RESPONSE_NOT_OK, description=Sepm returned non 200 HTTP response. There was an error.
Following error is found in 'semapisrv_log.xxxx-xx-xx.0.log' on SEPM:
[https-openssl-apr-0.0.0.0-8446-exec-9] ERROR c.s.s.s.c.e.h.GlobalControllerExceptionHandler - EXCEPTION: error.login com.symantec.sepm.core.exception.AuthorizationException: error.login
The SEPM API Service is having issues connecting to EDR
Solution 1:
Note: This will redeploy the sepm folder that was deleted so that the service runs properly.
Solution 2: