Error "error:1C800064:Provider routines::bad decrypt" when enabling Secure ICAP in Symantec Protection Engine

Products

• Protection Engine for Cloud Services

Issue/Introduction

The symcscan service is stopped shortly after enabling SecureICAP. 

• An error message in /opt/SYMCScan/SymantecProtectionAbortLog.log is found: 

  Error validating SSL/TLS configuration : Failed to add private key found in file <private_key_location> to ctx. Error code: error:1C800064:Provider routines::bad decrypt.

Environment

• SPE: All Versions
• SecureICAP
• Linux: All Supported Versions

Cause

Path given in the xmlmodifer "PrivateKeyPassPhrase" path is not the product installation bin directory.

Resolution

• Point the xmlmodifier command to the SPE bin directory. Default: /opt/SYMScan/bin/

  ./xmlmodifier -k /configuration/ProtocolSettings/ICAP/SecureICAP/PrivateKeyPassPhrase/@value <PASSPHRASE> /opt/SYMCScan/bin/ /opt/SYMCScan/bin/configuration.xml