After upgrade to 16.1 Detection servers in unknown status

Products

• Data Loss Prevention Enterprise Suite

Issue/Introduction

After upgrading to 16.1 some detection servers do not stay running, keystore warnings found in the logs. 

Environment

In the MonitorController#.log we find the following:
com.symantec.dlp.enforcedomainservices.certificatemanagement.CertificateStoreService addKeystore
WARNING: Keystore with name <keystore name> already exists.
java.nio.file.FileAlreadyExistsException: <install drive>:\ProgramData\Symantec\DataLossPrevention\EnforceServer\16.1.00000\keystore\<keystore name>.jks

You may also see
WARNING: Data access consistency issue
com.vontu.model.NonUniqueResultException:

Cause

The above error is indicate that the server may have been an endpoint prevent server on some earlier version of DLP, causing the certificate to exist on disk but not necessarily present in the necessary database locations, 

Resolution

For any keystore file named in the
"WARNING: Keystore with name <keystore name> already exists." messages. Remove these keystore files and restart the detector and monitor controller. This may be needed multiple times as subsequent servers reveal the same failure. 
By default these will be stored in 
Windows:\ProgramData\Symantec\DataLossPrevention\EnforceServer\16.1.00000\keystore\
Linux /Var/Symantec/DataLossPrevention/EnforceServer/16.1.00000/keystore/

 

Additional Information

The WARNING: Keystore with name <keystore name> already exists. warning will cause a cascade failure to provision subsequent detectors. A fix for this behavior will be released on 16.1mp1 so that a single server does not impact the remaining servers in such a fashion