FIPS enabled Servers unable to enroll with the Cloud

Products

• Endpoint Security Complete

Issue/Introduction

Symantec Endpoint Security (SES) client is unable to enroll with the cloud server. In the SES client user interface - [Help] - [Troubleshooting] - [Cloud Connection Status] shows "application error : 14" and client is not enrolled.

Wireshark trace logs showed no TLS traffic attempted during the handshake.

Environment

Release : 14.3x

Cause

SHA-1 was disabled in the environment. Currently SES requires cipher suites with some SHA-1 ciphers in order to function.

Resolution

Enable SHA-1 in the environment to resolve this issue.

Plans are for a future version of SES to use methods that do not require SHA-1.