I'm trying to update the server certificate on my SEPM 14 server with a certificate signed by my organizations CA and running into this issue.
The certificate is valid in the webserver on all browsers. I've exported the certificate with the private key into a password protected pfx, which seems to import correctly in SEPM. I've followed these instructions: https://support.symantec.com/en_US/article.HOWTO81061.html#v57845489 , but after restarting the SEPM services, I get the titular 'server certificate is not validated' error and cannot log in.
I've been resolving this by running the management server configuration wizard and loading a recovery zip file with the old key in it.
Has anyone run into this before? Is there any gotchas to creating the certificate/request? Here is a snip from my scm-ui err file in %TEMP%:
Apr 12, 2017 11:31:39 AM STDERR: java.io.FileNotFoundException: D:\Program Files (x86)\Symantec\Symantec Endpoint Protection Manager\tomcat\conf\server.xml (Access is denied)
Apr 12, 2017 11:31:39 AM STDERR: at java.io.FileInputStream.open0(Native Method)
Apr 12, 2017 11:31:39 AM STDERR: at java.io.FileInputStream.open(FileInputStream.java:195)
Apr 12, 2017 11:31:39 AM STDERR: at java.io.FileInputStream.<init>(FileInputStream.java:138)
Apr 12, 2017 11:31:39 AM STDERR: at java.io.FileInputStream.<init>(FileInputStream.java:93)
Apr 12, 2017 11:31:39 AM STDERR: at com.sygate.scm.util.XmlParser.readXmlFile(XmlParser.java:51)
Apr 12, 2017 11:31:39 AM STDERR: at com.sygate.scm.console.util.ServerCertUtil.ReadCreateStorePasswd(ServerCertUtil.java:74)
Apr 12, 2017 11:31:39 AM STDERR: at com.sygate.scm.console.util.ServerCertUtil.getCertificate(ServerCertUtil.java:162)
Apr 12, 2017 11:31:39 AM STDERR: at com.sygate.scm.console.util.CertificateHelper$DefaultCertHelper.getDefaultServerCertificate(CertificateHelper.java:60)
Apr 12, 2017 11:31:39 AM STDERR: at com.sygate.scm.console.util.ConsoleSSLSocketFactory.loadCertificate(ConsoleSSLSocketFactory.java:207)
Apr 12, 2017 11:31:39 AM STDERR: at com.sygate.scm.console.util.GUIManager.setupCommunicator(GUIManager.java:4476)
Apr 12, 2017 11:31:39 AM STDERR: at com.sygate.scm.console.util.GUIManager.login(GUIManager.java:2266)
Apr 12, 2017 11:31:39 AM STDERR: at com.sygate.scm.console.util.DataobjectManager.login(DataobjectManager.java:2766)
Apr 12, 2017 11:31:39 AM STDERR: at com.sygate.scm.console.handler.Manager.doLogin(Manager.java:119)
Apr 12, 2017 11:31:39 AM STDERR: at com.sygate.scm.console.handler.Manager.doLogin(Manager.java:100)
Apr 12, 2017 11:31:39 AM STDERR: at com.sygate.scm.console.ui.LoginPanel.login(LoginPanel.java:897)
Apr 12, 2017 11:31:39 AM STDERR: at com.sygate.scm.console.ui.LoginPanel$7$1.construct(LoginPanel.java:660)
Apr 12, 2017 11:31:39 AM STDERR: at com.sygate.scm.util.SwingWorker$2.run(SwingWorker.java:159)
Apr 12, 2017 11:31:39 AM STDERR: at java.lang.Thread.run(Thread.java:745)
Apr 12, 2017 11:31:39 AM STDERR: java.lang.NullPointerException
Apr 12, 2017 11:31:39 AM STDERR: at com.sygate.scm.console.util.ServerCertUtil.ReadCreateStorePasswd(ServerCertUtil.java:77)
Apr 12, 2017 11:31:39 AM STDERR: at com.sygate.scm.console.util.ServerCertUtil.getCertificate(ServerCertUtil.java:162)
Apr 12, 2017 11:31:39 AM STDERR: at com.sygate.scm.console.util.CertificateHelper$DefaultCertHelper.getDefaultServerCertificate(CertificateHelper.java:60)
Apr 12, 2017 11:31:39 AM STDERR: at com.sygate.scm.console.util.ConsoleSSLSocketFactory.loadCertificate(ConsoleSSLSocketFactory.java:207)
Apr 12, 2017 11:31:39 AM STDERR: at com.sygate.scm.console.util.GUIManager.setupCommunicator(GUIManager.java:4476)
Apr 12, 2017 11:31:39 AM STDERR: at com.sygate.scm.console.util.GUIManager.login(GUIManager.java:2266)
Apr 12, 2017 11:31:39 AM STDERR: at com.sygate.scm.console.util.DataobjectManager.login(DataobjectManager.java:2766)
Apr 12, 2017 11:31:39 AM STDERR: at com.sygate.scm.console.handler.Manager.doLogin(Manager.java:119)
Apr 12, 2017 11:31:39 AM STDERR: at com.sygate.scm.console.handler.Manager.doLogin(Manager.java:100)
Apr 12, 2017 11:31:39 AM STDERR: at com.sygate.scm.console.ui.LoginPanel.login(LoginPanel.java:897)
Apr 12, 2017 11:31:39 AM STDERR: at com.sygate.scm.console.ui.LoginPanel$7$1.construct(LoginPanel.java:660)
Apr 12, 2017 11:31:39 AM STDERR: at com.sygate.scm.util.SwingWorker$2.run(SwingWorker.java:159)
Apr 12, 2017 11:31:39 AM STDERR: at java.lang.Thread.run(Thread.java:745)
Apr 12, 2017 11:31:39 AM STDERR: java.io.FileNotFoundException: D:\Program Files (x86)\Symantec\Symantec Endpoint Protection Manager\tomcat\etc\keystore.jks (Access is denied)
Apr 12, 2017 11:31:39 AM STDERR: at java.io.FileInputStream.open0(Native Method)
Apr 12, 2017 11:31:39 AM STDERR: at java.io.FileInputStream.open(FileInputStream.java:195)
Apr 12, 2017 11:31:39 AM STDERR: at java.io.FileInputStream.<init>(FileInputStream.java:138)
Apr 12, 2017 11:31:39 AM STDERR: at java.io.FileInputStream.<init>(FileInputStream.java:93)
Apr 12, 2017 11:31:39 AM STDERR: at com.sygate.scm.console.util.ServerCertUtil.getCertificate(ServerCertUtil.java:169)
Apr 12, 2017 11:31:39 AM STDERR: at com.sygate.scm.console.util.CertificateHelper$DefaultCertHelper.getDefaultServerCertificate(CertificateHelper.java:60)
Apr 12, 2017 11:31:39 AM STDERR: at com.sygate.scm.console.util.ConsoleSSLSocketFactory.loadCertificate(ConsoleSSLSocketFactory.java:207)
Apr 12, 2017 11:31:39 AM STDERR: at com.sygate.scm.console.util.GUIManager.setupCommunicator(GUIManager.java:4476)
Apr 12, 2017 11:31:39 AM STDERR: at com.sygate.scm.console.util.GUIManager.login(GUIManager.java:2266)
Apr 12, 2017 11:31:39 AM STDERR: at com.sygate.scm.console.util.DataobjectManager.login(DataobjectManager.java:2766)
Apr 12, 2017 11:31:39 AM STDERR: at com.sygate.scm.console.handler.Manager.doLogin(Manager.java:119)
Apr 12, 2017 11:31:39 AM STDERR: at com.sygate.scm.console.handler.Manager.doLogin(Manager.java:100)
Apr 12, 2017 11:31:39 AM STDERR: at com.sygate.scm.console.ui.LoginPanel.login(LoginPanel.java:897)
Apr 12, 2017 11:31:39 AM STDERR: at com.sygate.scm.console.ui.LoginPanel$7$1.construct(LoginPanel.java:660)
Apr 12, 2017 11:31:39 AM STDERR: at com.sygate.scm.util.SwingWorker$2.run(SwingWorker.java:159)
Apr 12, 2017 11:31:39 AM STDERR: at java.lang.Thread.run(Thread.java:745)
Apr 12, 2017 11:31:42 AM STDERR: com.sygate.scm.console.util.ConsoleException: Your server certificate is not validated. If you trust the server, you must accept the certificate. Log in again and if the error persists, contact your administrator. ErrorCode: 0x12910000
Apr 12, 2017 11:31:42 AM STDERR: at com.sygate.scm.console.util.GUIManager.constructConsoleException(GUIManager.java:2618)
Apr 12, 2017 11:31:42 AM STDERR: at com.sygate.scm.console.util.GUIManager.login(GUIManager.java:2397)
Apr 12, 2017 11:31:42 AM STDERR: at com.sygate.scm.console.util.DataobjectManager.login(DataobjectManager.java:2766)
Apr 12, 2017 11:31:42 AM STDERR: at com.sygate.scm.console.handler.Manager.doLogin(Manager.java:119)
Apr 12, 2017 11:31:42 AM STDERR: at com.sygate.scm.console.handler.Manager.doLogin(Manager.java:100)
Apr 12, 2017 11:31:42 AM STDERR: at com.sygate.scm.console.ui.LoginPanel.login(LoginPanel.java:897)
Apr 12, 2017 11:31:42 AM STDERR: at com.sygate.scm.console.ui.LoginPanel$7$1.construct(LoginPanel.java:660)
Apr 12, 2017 11:31:42 AM STDERR: at com.sygate.scm.util.SwingWorker$2.run(SwingWorker.java:159)
Apr 12, 2017 11:31:42 AM STDERR: at java.lang.Thread.run(Thread.java:745)