Error : MasterKeyException: Master key does not match the stored validation info.

Products

• Data Loss Prevention Core Package

Issue/Introduction

The Enforce server services (Detection Server Controller Service and Incident Persister Service) not staying in running state following a reinstallation or migration to different server or drive on same server. 

logs\\debug\\SymantecDLPDetectionServerController.log

WrapperSimpleApp Error: Caused by: com.symantec.dlp.enforceinfraservices.keys.MasterKeyException: Master key does not match the stored validation info.

logs\\debug\\IncidentPersister_0.log

Caused by: com.symantec.dlp.enforceinfraservices.credentials.PasswordEncryptionException: com.vontu.vontukeystorehouse.common.PasswordManagerException: Unable to retrieve password encryption key 1.

 

 at com.vontu.enforce.domainlayer.credentials.PasswordEncryption.decryptPassword(PasswordEncryption.java:61)

 

 at com.vontu.enforce.domainlayer.credentials.PasswordService.getClearTextPassword(PasswordService.java:115)

 

 

Environment

DLP enforce server 

Cause

One of possible causes is that incorrect database server information was used while reinstalling / moving enforce.

This issue validating its cryptographic keys, leading to error mentioned.

 

Resolution

Check the database server connection parameters and to make sure enforce is connected to correct database server/instance.