Java Error blocks display of SPE UI after SPE upgrade from 8.2.x

Products

• Protection Engine for NAS
• Protection Engine for Cloud Services

Issue/Introduction

When navigating to the local UI console of Symantec Protection Engine (SPE) 8.2.x after upgrade, instead of SPE displaying the console, the browser displays a dialog box containing "Java Error: Error establishing secure communications with Symantec Protection Engine". SPE still processes scan requests.

 

Environment

Known to sometimes occur in the following upgrade scenarios:

• upgrading from 8.2.0 to 8.2.1
• upgrading from 8.2.0 to 8.2.2
• upgrading from 8.2.1 to 8.2.2

Resolution

 

BROADCOM commits to resolve this issue in a future release.

 

To workaround

1. Stop SPE service
2. Navigate to SPE install folder
3. Remove/delete files:
   - keyStore.private
   - keyStore.public
   - Certificate.pem
   
   
4. Open command prompt from SPE installation directory
5. Execute below commands
   C:\Program Files\Symantec\Scan Engine>XMLModifier.exe -k /configuration/Resources/System/CertStorePvtCrypt/@value 112233 "C:\Program Files\Symantec\Scan Engine" configuration.xml
   C:\Program Files\Symantec\Scan Engine>XMLModifier.exe -k /configuration/Resources/System/CertStorePubCrypt/@value 332211 "C:\Program Files\Symantec\Scan Engine" configuration.xml
   
   Note - Above commands assume SPE is installed on default location i.e. C:\Program Files\Symantec\Scan Engine
   If not, then change the installation path in above commands
   
   
6. Start SPE service
7. Open up the SPE UI, this time hopefully it should open up without any error.
8. If symptoms persist, re-install.

To re-install

1. Backup licenses, logs, configuration files, and contents of local quarantine
2. Uninstall 8.2.2
3. Delete install folder
4. Reinstall 8.2.2