AIP Profile Creation fails: AIPAuthenticationException: Unknown Error

Products

• Data Loss Prevention

Issue/Introduction

The admin is attempting to add the MIP profiles into the DLP Console and the upload is failing

Environment

DLP 16.0 - DLP 16.0 RU2

Microsoft Information Protection

Cause

The SymantecDLPManager.conf file is not utilizing TLSv1.2 when attempting to upload the profile to the console and while communicating with Microsoft

Resolution

This issue is resolved in DLP 16.1.

For 16.0.x versions do the following:

Append the following 3 lines in the SymantecDLPManager.conf file:

wrapper.java.additional.300 = -Djavax.net.debug=ssl,handshake
wrapper.java.additional.1000=-Djdk.tls.client.protocols="TLSv1.2"
wrapper.java.additional.1001=-Djdk.tls.client.cipherSuites="TLS_RSA_WITH_AES_128_CBC_SHA256"

Once added to the SymantecDLPManger.conf file, cycle the DLP Services and re-attempt to upload the MIP Profiles and the upload will now succeed.