Detection server error "KEK does not exist"
search cancel

Detection server error "KEK does not exist"

book

Article ID: 402180

calendar_today

Updated On:

Products

Data Loss Prevention Enterprise Suite

Issue/Introduction

After installing 16.1 detection server the server shows as unknown in the console. The detection server SymantecDLPEnforceConnector log shows the following:

Class: com.symantec.dlp.cloudapplicationcommon.pollers.CatalogPoller
Method: readCatalogObject
Level: WARNING
Message:  Exception received when reading catalog. Will retry in next poll cycle.
com.symantec.dlp.storageandnotification.exceptions.NonRecoverableStorageSecurityException: Exception while getting the key container
    at com.symantec.dlp.storage.spi.impl.EncryptionInMemoryKeyProviderForUDS.getKeyEncryptingKeyContainer(EncryptionInMemoryKeyProviderForUDS.java:76)
    at com.symantec.dlp.storage.spi.impl.security.EncryptedDataFile.decryptFileEncryptingKey(EncryptedDataFile.java:336)
    at com.symantec.dlp.storage.spi.impl.security.EncryptedDataFile.getFileEncryptingKeyContainer(EncryptedDataFile.java:296)
    at com.symantec.dlp.storage.spi.impl.security.EncryptedDataFile.buildFileEncryptingKeyContainerForDecrypt(EncryptedDataFile.java:206)
    at com.symantec.dlp.storage.spi.impl.security.EncryptedDataFile.getInputReader(EncryptedDataFile.java:135)
    at com.symantec.dlp.storage.spi.impl.security.EncryptedDataFile.getInputReader(EncryptedDataFile.java:51)
    at com.symantec.dlp.storage.spi.impl.segmentation.SlicedDataFile.getSecureInputReader(SlicedDataFile.java:89)
    at com.symantec.dlp.storage.spi.impl.segmentation.UnitaryDataFile.getInputReader(UnitaryDataFile.java:68)
    at com.symantec.dlp.storage.spi.impl.segmentation.UnitaryDataFile.getInputReader(UnitaryDataFile.java:36)
    at com.symantec.dlp.storageinfrastructure.impl.StorageReadServiceImpl.getDataReader(StorageReadServiceImpl.java:179)
    at com.symantec.dlp.storageinfrastructure.impl.StorageReadServiceImpl.getDataReader(StorageReadServiceImpl.java:166)
    at com.symantec.dlp.cloudapplicationcommon.pollers.CatalogPoller.readCatalogObject(CatalogPoller.java:157)
    at com.symantec.dlp.cloudapplicationcommon.pollers.CatalogPoller.onPolledData(CatalogPoller.java:135)
    at com.symantec.dlp.cloudapplicationcommon.pollers.StorageListFilesPoller$Poller.run(StorageListFilesPoller.java:185)
    at java.util.concurrent.Executors$RunnableAdapter.call(Executors.java:511)
    at java.util.concurrent.FutureTask.run(FutureTask.java:266)
    at java.util.concurrent.ScheduledThreadPoolExecutor$ScheduledFutureTask.access$201(ScheduledThreadPoolExecutor.java:180)
    at java.util.concurrent.ScheduledThreadPoolExecutor$ScheduledFutureTask.run(ScheduledThreadPoolExecutor.java:293)
    at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1149)
    at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:624)
    at java.lang.Thread.run(Thread.java:750)
Caused by: com.symantec.dlp.storageandnotification.exceptions.NonRecoverableStorageSecurityException: KEK does not exist.
    at com.symantec.dlp.storage.spi.impl.EncryptionInMemoryKeyProviderForUDS.getKeyEncryptingKeyContainer(EncryptionInMemoryKeyProviderForUDS.java:66)
    ... 20 more

Environment

16.1

Cause

Known issue with 16.1

Resolution

Upgrade detection server and Enforce to 16.1 MP1 or later.

Powered by Wolken Software