Error: "opsec_pull_cert: cannot execute" in Checkpoint collector log

Products

• Security Information Manager

Issue/Introduction

Symptoms
The Checkpoint collector does not receive any events and you see this error in the Checkpoint collector log:

OPSEC pull cert error:java.io.IOException: java.io.IOException: /opt/Symantec/sesa/Agent/collectors/checkpoint/opsec_pull_cert: cannot execute
Error while init sensor "". Can't get OPSEC certificate.

 

Cause

The collector is not able to pull the cert from the LEA server. This cert is stored on the appliance in the directory /opt/Symantec/sesa/Agent/collectors/checkpoint/certs/[LEA IP]/SSIM/opsec.p12.

Resolution

The SSIM object on the LEA server needed to be removed and then recreated.