Data Loss Prevention (Vontu) services do not automatically start after a server restart

Products

• Data Loss Prevention

Issue/Introduction

After a restart of the Enforce server, the Symantec DLP Notifier Service does not start properly, hence other dependent services like Symantec DLP Manager Service (responsible for the Enforce Administration page) will also not start.
The Symantec DLP services might start if done manually in the proper order.

In the error log:
Sep 28, 2017 11:19:11 AM com.vontu.util.config.SystemProperties load
SEVERE: Unable to load SystemProperties, property 'com.vontu.properties' is not defined

In the VontuNotifier log:
INFO   | jvm 1    | 2017/08/17 17:10:25 | Aug 17, 2017 5:10:25 PM com.vontu.model.notification.rmi.ModelNotifierImpl addModelListener
INFO   | jvm 1    | 2017/08/17 17:10:25 | WARNING: Error adding listener proxy to notifier: <machine_FQDN>:21180
INFO   | jvm 1    | 2017/08/17 17:10:25 | Aug 17, 2017 5:10:25 PM com.vontu.model.notification.rmi.ModelNotifierImpl addModelListener
INFO   | jvm 1    | 2017/08/17 17:10:25 | WARNING: Exception creating connection to: 127.0.0.1; nested exception is:
INFO   | jvm 1    | 2017/08/17 17:10:25 |     java.net.SocketException: Permission denied: connect
INFO   | jvm 1    | 2017/08/17 17:10:25 | java.rmi.ConnectIOException: Exception creating connection to: 127.0.0.1; nested exception is:
INFO   | jvm 1    | 2017/08/17 17:10:25 |     java.net.SocketException: Permission denied: connect
INFO   | jvm 1    | 2017/08/17 17:10:25 |     at sun.rmi.transport.tcp.TCPEndpoint.newSocket(TCPEndpoint.java:631)
INFO   | jvm 1    | 2017/08/17 17:10:25 |     at sun.rmi.transport.tcp.TCPChannel.createConnection(TCPChannel.java:216)
INFO   | jvm 1    | 2017/08/17 17:10:25 |     at sun.rmi.transport.tcp.TCPChannel.newConnection(TCPChannel.java:202)
INFO   | jvm 1    | 2017/08/17 17:10:25 |     at sun.rmi.server.UnicastRef.invoke(UnicastRef.java:130)
INFO   | jvm 1    | 2017/08/17 17:10:25 |     at com.vontu.model.notification.rmi.ModelListenerProxyImpl_Stub.notificationActivated(Unknown Source)
INFO   | jvm 1    | 2017/08/17 17:10:25 |     at com.vontu.model.notification.rmi.ModelNotifierImpl.addModelListener(ModelNotifierImpl.java:154)
INFO   | jvm 1    | 2017/08/17 17:10:25 |     at sun.reflect.GeneratedMethodAccessor10.invoke(Unknown Source)
INFO   | jvm 1    | 2017/08/17 17:10:25 |     at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
INFO   | jvm 1    | 2017/08/17 17:10:25 |     at java.lang.reflect.Method.invoke(Method.java:498)
INFO   | jvm 1    | 2017/08/17 17:10:25 |     at sun.rmi.server.UnicastServerRef.dispatch(UnicastServerRef.java:323)
INFO   | jvm 1    | 2017/08/17 17:10:25 |     at sun.rmi.transport.Transport$1.run(Transport.java:200)
INFO   | jvm 1    | 2017/08/17 17:10:25 |     at sun.rmi.transport.Transport$1.run(Transport.java:197)
INFO   | jvm 1    | 2017/08/17 17:10:25 |     at java.security.AccessController.doPrivileged(Native Method)
INFO   | jvm 1    | 2017/08/17 17:10:25 |     at sun.rmi.transport.Transport.serviceCall(Transport.java:196)
INFO   | jvm 1    | 2017/08/17 17:10:25 |     at sun.rmi.transport.tcp.TCPTransport.handleMessages(TCPTransport.java:568)
INFO   | jvm 1    | 2017/08/17 17:10:25 |     at sun.rmi.transport.tcp.TCPTransport$ConnectionHandler.run0(TCPTransport.java:826)
INFO   | jvm 1    | 2017/08/17 17:10:25 |     at sun.rmi.transport.tcp.TCPTransport$ConnectionHandler.lambda$run$0(TCPTransport.java:683)
INFO   | jvm 1    | 2017/08/17 17:10:25 |     at java.security.AccessController.doPrivileged(Native Method)
INFO   | jvm 1    | 2017/08/17 17:10:25 |     at sun.rmi.transport.tcp.TCPTransport$ConnectionHandler.run(TCPTransport.java:682)
INFO   | jvm 1    | 2017/08/17 17:10:25 |     at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1142)
INFO   | jvm 1    | 2017/08/17 17:10:25 |     at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:617)
INFO   | jvm 1    | 2017/08/17 17:10:25 |     at java.lang.Thread.run(Thread.java:745)
INFO   | jvm 1    | 2017/08/17 17:10:25 | Caused by: java.net.SocketException: Permission denied: connect
INFO   | jvm 1    | 2017/08/17 17:10:25 |     at java.net.DualStackPlainSocketImpl.connect0(Native Method)
INFO   | jvm 1    | 2017/08/17 17:10:25 |     at java.net.DualStackPlainSocketImpl.socketConnect(DualStackPlainSocketImpl.java:79)
INFO   | jvm 1    | 2017/08/17 17:10:25 |     at java.net.AbstractPlainSocketImpl.doConnect(AbstractPlainSocketImpl.java:350)
INFO   | jvm 1    | 2017/08/17 17:10:25 |     at java.net.AbstractPlainSocketImpl.connectToAddress(AbstractPlainSocketImpl.java:206)
INFO   | jvm 1    | 2017/08/17 17:10:25 |     at java.net.AbstractPlainSocketImpl.connect(AbstractPlainSocketImpl.java:188)
INFO   | jvm 1    | 2017/08/17 17:10:25 |     at java.net.PlainSocketImpl.connect(PlainSocketImpl.java:172)
INFO   | jvm 1    | 2017/08/17 17:10:25 |     at java.net.SocksSocketImpl.connect(SocksSocketImpl.java:392)
INFO   | jvm 1    | 2017/08/17 17:10:25 |     at java.net.Socket.connect(Socket.java:589)
INFO   | jvm 1    | 2017/08/17 17:10:25 |     at java.net.Socket.connect(Socket.java:538)
INFO   | jvm 1    | 2017/08/17 17:10:25 |     at com.vontu.util.rmi.ConfigurableRMIClientSocketFactory.createSocket(ConfigurableRMIClientSocketFactory.java:77)
INFO   | jvm 1    | 2017/08/17 17:10:25 |     at sun.rmi.transport.tcp.TCPEndpoint.newSocket(TCPEndpoint.java:613)
INFO   | jvm 1    | 2017/08/17 17:10:25 |     ... 21 more
 

Environment

Data Loss Prevention Enforce server.

Cause

Lack of permissions for the account running the service (usually .\protect).

Resolution

Add the user protect to the local administrators group.