Symantec DLP Manager Service was stopped and giving below error when starting it on Enforce:
"Windows could not start the Symantec DLP Manager Service on Local Computer"
Found below error in SymantecDLPManager.log:
STATUS | wrapper | 2023/08/24 15:19:31 | Launching a JVM...
DEBUG | wrapper | 2023/08/24 15:19:31 | Java Command Line:
DEBUG | wrapper | 2023/08/24 15:19:31 | Command: "E:\Program Files\AdoptOpenJRE\jdk8u322-b06-jre\bin\java" -Dcatalina.home=../tomcat "-Djava.io.tmpdir=E:/ProgramData/Symantec/DataLossPrevention/EnforceServer/16.0.00000/tomcatTemp" -Dcom.vontu.properties=../config/Protect.properties -Dcom.vontu.properties.custom.directory=../config/custom -Djava.protocol.handler.pkgs=com.vontu.util.urlconnection -Djava.endorsed.dirs=../tomcat/endorsed -Djava.awt.headless=true -Djava.security.manager -Djava.security.policy==../config/manager.policy -Djava.security.auth.login.config=../config/jaas.config -Djava.util.logging.config.file=../config/ManagerLogging.properties -Dcom.vontu.protect.dir=.. -Dcom.vontu.service.name=Manager -Dcom.sun.xml.ws.fault.SOAPFaultBuilder.disableCaptureStackTrace=true -Dsun.zip.altEncoding=default -Dcom.sun.security.enableCRLDP=true -Djsse.enableCBCProtection=false -XX:+UseCompressedOops -Djava.security.properties=../config/java.security -Djdk.http.auth.tunneling.disabledSchemes="" -Dfile.encoding=Cp1252 -Duser.language=en -Xms1378m -Xmx2048m -Djava.library.path="../lib/native;../../../../ServerPlatformCommon/16.0.00000/Protect/lib/native;../lib/native;../../../../ServerPlatformCommon/16.0.00000/Protect/lib/native;../lib/native;../../../../ServerPlatformCommon/16.0.00000/Protect/lib/native;E:\OpenSSH;E:\Oracle19\product\19.0.0\client_1\bin;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;E:\CtrlM_AFT\CygwinOpenSSH\bin;E:\OpenSSH;C:\Users\SRV-SymDLP\AppData\Local\Microsoft\WindowsApps" -classpath "../../../../ServerPlatformCommon/16.0.00000/Protect/lib/jar/wrapper.jar;../tomcat/bin/bootstrap.jar;../tomcat/bin/tomcat-juli.jar" -Dwrapper.key="Mad8-ISOFTJACL5KpXoZRrhjHKok4SWQ" -Dwrapper.port=32003 -Dwrapper.debug="TRUE" -Dwrapper.pid=7308 -Dwrapper.timer_slow_threshold="2" -Dwrapper.version="3.5.26-st" -Dwrapper.native_library="wrapper" -Dwrapper.arch="x86" -Dwrapper.service="TRUE" -Dwrapper.cpu.timeout="10" -Dwrapper.jvmid=1 -Dwrapper.lang.domain=wrapper -Dwrapper.lang.folder=../lang org.tanukisoftware.wrapper.WrapperStartStopApp org.apache.catalina.startup.Bootstrap 1 start org.apache.catalina.startup.Bootstrap true 1 stop
DEBUG | wrapper | 2023/08/24 15:19:31 | JVM started (PID=9416)
INFO | jvm 1 | 2023/08/24 15:19:32 | Exception in thread "main" java.lang.ExceptionInInitializerError
INFO | jvm 1 | 2023/08/24 15:19:32 | at org.tanukisoftware.wrapper.WrapperManager.privilegedClassInit(WrapperManager.java:600)
INFO | jvm 1 | 2023/08/24 15:19:32 | at org.tanukisoftware.wrapper.WrapperManager.access$000(WrapperManager.java:125)
INFO | jvm 1 | 2023/08/24 15:19:32 | at org.tanukisoftware.wrapper.WrapperManager$1.run(WrapperManager.java:491)
INFO | jvm 1 | 2023/08/24 15:19:32 | at java.security.AccessController.doPrivileged(Native Method)
INFO | jvm 1 | 2023/08/24 15:19:32 | at org.tanukisoftware.wrapper.WrapperManager.<clinit>(WrapperManager.java:488)
INFO | jvm 1 | 2023/08/24 15:19:32 | at java.lang.Class.forName0(Native Method)
INFO | jvm 1 | 2023/08/24 15:19:32 | at java.lang.Class.forName(Class.java:264)
INFO | jvm 1 | 2023/08/24 15:19:32 | at org.tanukisoftware.wrapper.WrapperStartStopApp.class$(WrapperStartStopApp.java:180)
INFO | jvm 1 | 2023/08/24 15:19:32 | at org.tanukisoftware.wrapper.WrapperStartStopApp.<init>(WrapperStartStopApp.java:180)
INFO | jvm 1 | 2023/08/24 15:19:32 | at org.tanukisoftware.wrapper.WrapperStartStopApp.main(WrapperStartStopApp.java:891)
INFO | jvm 1 | 2023/08/24 15:19:32 | Caused by: java.security.AccessControlException: access denied ("java.util.PropertyPermission" "org.tanukisoftware.wrapper.WrapperResources.validateResourceKeys" "read")
INFO | jvm 1 | 2023/08/24 15:19:32 | at java.security.AccessControlContext.checkPermission(AccessControlContext.java:472)
INFO | jvm 1 | 2023/08/24 15:19:32 | at java.security.AccessController.checkPermission(AccessController.java:886)
INFO | jvm 1 | 2023/08/24 15:19:32 | at java.lang.SecurityManager.checkPermission(SecurityManager.java:549)
INFO | jvm 1 | 2023/08/24 15:19:32 | at java.lang.SecurityManager.checkPropertyAccess(SecurityManager.java:1294)
INFO | jvm 1 | 2023/08/24 15:19:32 | at java.lang.System.getProperty(System.java:719)
INFO | jvm 1 | 2023/08/24 15:19:32 | at org.tanukisoftware.wrapper.WrapperSystemPropertyUtil.getStringProperty(WrapperSystemPropertyUtil.java:35)
INFO | jvm 1 | 2023/08/24 15:19:32 | at org.tanukisoftware.wrapper.WrapperSystemPropertyUtil.getBooleanProperty(WrapperSystemPropertyUtil.java:54)
INFO | jvm 1 | 2023/08/24 15:19:32 | at org.tanukisoftware.wrapper.WrapperResources.<clinit>(WrapperResources.java:59)
INFO | jvm 1 | 2023/08/24 15:19:32 | ... 10 more
DEBUG | wrapper | 2023/08/24 15:19:32 | JVM process exited with a code of 1, setting the wrapper exit code to 1.
ERROR | wrapper | 2023/08/24 15:19:32 | JVM exited while loading the application.
DLP 16.0 MP2
manager.policy file was missing from the config directory
1. As per errors in log, manager service is missing read permission on properties files which is assigned in manager.policy
2. Checked and found that manager.policy file is missing from <Install Drive>\Program Files\Symantec\DataLossPrevention\EnforceServer\16.0.00000\Protect\config directory
3. Copied manager.policy file from another(production) 16.0 DLP environment into <Install Drive>\Program Files\Symantec\DataLossPrevention\EnforceServer\16.0.00000\Protect\config directory
Note: Before copying, open manager.policy in notepad++ and check the DLP install paths and drive letters, if they are not same then correct them.
4. Symantec DLP Manager Service started successfully after this