When trying to create the package it is unclear on the options to install
Release : 16.0 and above
The documentation says to use SymantecDLP. This should be the Administrator account created during the initial install of DLP or some other account with admin rights.
./DiscoverClusterKeyTool -generate-package-type=All -enforce-url=https://192.168.1.7:8443 -enforce-username=Administrator -enforce-password=Password#1 -disable-ssl-verification=true -output-dir=/opt/Symantec/DataLossPrevention/EnforceServer/16.0.00000/Protect/keystore/discovercluster
Below is an explanation of each switch needed.
generate-package-type=All : This switch will create the node and worker packages. You will need to extract the dlp_discover_cluster_auth.zip to use the two zip files
enforce-url=https://<ipaddress> : this can be localhost, ip address of enforce, or hostname of enforce (NOTE: if enforce is on RHEL don't forget to use :8443 in the URL)
enforce-username : this is an Enforce UI user. You can use the Administrator account since that account already has admin right to the console
enforce-password: this is the enforce UI users password that has admin rights to the console
output-dir= : this will be the keystone directory listed above.
See below example: