Endpoint Protection Manager status is "update certificate" after registration with J-Core

Products

• Endpoint Protection

Issue/Introduction

After registering a SEPM (Symantec Endpoint Protection Manager) with J-Core and assigning a TDAD policy (Threat Defense for Active Directory) the SEPM status changes to "update certificate"

The TDAD Deploy tab displays "The master SEPM for this Domain is down"

SETDADCore.log error:

Exception: com.sun.jersey.api.client.ClientHandlerException: javax.net.ssl.SSLHandshakeException: Received fatal alert: unknown_ca

Environment

SEP 14.3

Cause

Whenever a new SEPM is added to J-Core (the TDAD server) the SEPM status will change to "update certificate" until the next heartbeat.

Resolution

SEPM status should change to "Success" after next heartbeat (when J-Core — the TDAD server — next queries the SEPM status)