Discover Cluster Data node won't start after implementing custom sslkeystores.

Products

• Data Loss Prevention Enterprise Suite

Issue/Introduction

After rolling out custom SSLkeytool generated keystores(.sslkeystore files), most Detectors are online with the new keystores, with the exception of Discover Cluster Data Nodes.  The Data nodes remain offline and SymantecDLPEnforceConnectorService will not stay running. 

 

Resolution

For Discover Cluster, the path to uds.ssl.keystore.file.path mentioned in Using sslkeytool to Generate New Enforce Server and Detection Server Certificates must have double slashes.
For example:
D:\\ProgramData\\Symantec\\DataLossPrevention\\DetectionServer\\16.1.00000\\keystore\\<keystore name>.sslKeyStore