000036118 - Saving RSA Live credentials in NetWitness Endpoint fails with "Could not store into lockbox"
Issue When trying to save the ECATUI, Configure > Monitoring and External Components, RSA Live credentials, and it fails with the error "Could not store into lockbox".
Cause The RSA ECAT API Server service doesn't have permission to write to the lockbox files.
The lockbox files have become corrupt, and are no longer writeable.
Resolution 1. Check the RSA ECAT services have permission to write to files in the Server directory?
For example, in this screenshot, the Administrators group has Full control in the Server directory which gives Write permission.
2. If the Server directory permissions check above wasn't the cause of the issue, then perhaps the lockbox files are not writable.
a. On the ECAT Server in the ECATUI, Configure > Monitoring and External Components.
Make a copy of all the settings you have previously made, so these values can be re-entered later.
b. Exit the ECATUI, and stop all the ECAT services on the ECAT Server.
c. On the ECAT Server, in the Server directory (default path C:\Program Files\RSA\ECAT\Server) make a copy of all 4 km* files (km, km.bak, km.bak.FCD, km.FCD) to another location. These are the lockbox files and its backups.
d. Delete the 4 km* files.
e. Start all the ECAT services, the km* files will automatically be re-created in the Server directory.
f. In the ECATUI, Configure > Monitoring and External Components re-enter all the settings, starting with RSA Live. Ensure the RSA Live credentials can now be saved.