After upgrading from a 15.x Enforce to 15.8 LDAPS fails to connect.
Enforce 15.8
In 15.x DLP was using Oracle Java JRE in 15.8 the Java is OpenJRE and the path can be set anywhere so the upgrade fails to copy the cacerts to the new OpenJRE directory.
Back up the original first. C:\Program files\adoptOpenJDK\<javaversion>\lib\security\cacerts then:
Copy the C:\program files\symantec\DataLossPrevention\ServerJRE\1.8.0_181\lib\security\cacerts to the OpenJRE directory default: C:\Program files\adoptOpenJDK\<javaversion>\lib\security folder.
Restart Enforce Manager Service.