When Importing SSL certificates to Enforce Server, getting error "keytool error: java.io.FileNotFoundException"

Products

• Data Loss Prevention Enforce

Issue/Introduction

When the customer wants to import a Domain Controller certificate on Enforce Server. He follows below article 

Importing SSL certificates to Enforce or Discover servers

But when the customer runs the command mentioned in step 3 of the article he gets the below error. 

"keytool error: java.io.FileNotFoundException"  .\lib\security\cacerts (The system cannot find the path specified)

 

Cause

This happens if your JAVA_HOME system variable is not set to your ServerJRE location.  

Resolution

1. Set JAVA_HOME system variable to your ServerJRE location. 

eg, fSet the JAVA_HOME system variable to "<system drive>:\Program Files\Symantec\DataLossPrevention\ServerJRE\<version>"

Once done. Run the import command again and the certificate should get added. 

2. If it still does not work run the below command to import the cert. 

keytool -importcert -alias new_endpointgroup_alias -keystore "JAVA_HOME"\lib\security\cacerts -file my-domaincontroller.crt