"Unable to Store Certificate" when logging to Symantec Critical System Protection (SCSP and SDCS) console

Products

• Critical System Protection
• Data Center Security Server

Issue/Introduction

Log into SCSP manager, select "Always accept this Certificate".  The error "Unable to store Certificate" appears, but clicking ok allows the user to logon.

"Unable to Store Certificate"

The console.err log shows:

java.io.FileNotFoundException: C:\Program Files (x86)\Symantec\Critical System Protection\Console\certs\siscerts (The system cannot find the path specified)

The console.err location path:

C:\Program Files (x86)\Symantec\Critical System Protection\Console\

Cause

There are two possible causes:

• Console failed to create certs folder inside the installation directory.
• The console install was ran without elevated privileges.
• You have the console on Windows 8 or Windows Server 2012 and User Access Control is still enabled in the registry.

Resolution

Apply the appropriate solution below according to cause:

Failure to create certs folder

Create the certs folder inside the installation directory for console and give it full permissions for the user who is logged in. The default path for the console folder is:

C:\Program Files\Symantec\Critical System Protection\Console

Installed without elevated privileges

1. Uninstall the current installation of the console.
2. Right-click the console.exe and click Run as Administrator.
3. Follow through the Installation wizard.

Installed on Windows 8 or Windows Server 2012

1. Uninstall the DCS Management Console.
2. Right-click the Windows icon in the lower left of the screen.
3. Click Run
4. Type regedit and press Enter.
5. Navigate to HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system
6. In the right pane, right-click EnableLUA and click Modify.
7. Change the number 1 to a 0 and click OK.
8. Restart the Server.
9. Install the DCS Management Console.