Agent tools fail with error "PGP Cryptographic Engine FIPS 140-2 power on self tests failed"

Products

• Data Loss Prevention
• Data Loss Prevention Endpoint Prevent

Issue/Introduction

When attempting to run any of the agent tools, they fail with the error "PGP Cryptographic Engine FIPS 140-2 power on self tests failed"

Cause

The Agent tools require the following dlls to run in addition to the executable.

aqp.dll(Only required to run the AttributeQueryResolver.exe tool)
PGPce.dll
PGPce.dll.sig

In addition, you may also need the following agent databases

sto.ead
ks.ead

 

Resolution

All of these files should be present in the DLP agent installation directory on a normal install, and if you plan to use the agent tools from a different directory than the agent installation directory then you need to copy them to the tools directory as well. 

Also, the service_shutdown.exe tool must be run from the same directory as the agent keystore or it will throw this error.