Error Validating Policy Message in Dell Remote Management Console

Summary: In version 9.5 and later of Dell Security Management Server (formerly Dell Data Protection | Enterprise Edition) and Dell Security Management Server Virtual (formerly Dell Data Protection | Virtual Edition), we get an "Error Validating Policy" message in RMC if there is an existing policy syntax issue. This was reported as an "internal server error" in previous 9.x versions. ...

This article applies to This article does not apply to This article is not tied to any specific product. Not all product versions are identified in this article.
Check out other resources

Symptoms

Affected Products:

  • Dell Security Management Server
  • Dell Data Protection | Enterprise Edition
  • Dell Security Management Server Virtual
  • Dell Data Protection | Virtual Edition

Affected Versions:

  • v9.5 and later

Error Validating Policy message
Figure 1: (English Only) Error Validating Policy message

Cause

Not Applicable

Resolution

This policy check can be disabled by modifying the core server configuration file PolicyService.config with the property name StrictValidation, changing the value from 'true' to 'false'.

In the core server logs we get the exact policy and value that is causing issues:

2016-10-24 09:43:01,657 ERROR POLICY [57] - Invalid Value for 90039 - Script Control Approve Scripts in Folders (and Subfolders): \ApprovedScripts\
2016-10-24 09:43:01,657 ERROR POLICY [57] - Exception in ArbitrateValue: uid - 90039
System.ArgumentException: Invalid Value for 90039
    at Credant.Policy.Policy.set_Value(String value):q!
    at Credant.Policy.Enterprise.Assembler.ArbitrateValue(Policy currentPolicy)

Steps to editing PolicyService.config

  1. Open Services on the Dell Security Management Server
  2. Stop the Dell Core Server Service.

Stop the Dell Core Server Service
Figure 2: (English Only) Stop the Dell Core Server Service

  1. Go to C:\Program Files\Dell\Enterprise Edition\Core Server and edit PolicyService.config with a text editor.

Edit PolicyService.config
Figure 3: (English Only) Edit PolicyService.config

  1. Scroll down the file to locate StrictValidation.

Locate StrictValidation
Figure 4: (English Only) Locate StrictValidation

  1. Change StrictValidation from true to false (located below).

Change StrictValidation from true to false
Figure 5: (English Only) Change StrictValidation from true to false

  1. Save Policyservice.config and exit the text editor.
  2. Start the Dell Core Server Service.

Start the Dell Core Server Service
Figure 6: (English Only) Start the Dell Core Server Service

v9.11 and Later

Steps to editing PolicyService.config:

  1. Open the Virtual Appliance.
  2. Go to Basic Configuration.

Go to Basic Configuration
Figure 7: (English Only) Go to Basic Configuration

  1. Under Basic Configuration, scroll down to Stop Application (shown below).

Stop Application
Figure 8: (English Only) Stop Application

  1. Confirm service shutdown.

Confirm Stop Application
Figure 9: (English Only) Confirm Stop Application

Confirm service shutdown
Figure 10: (English Only) Confirm service shutdown

  1. From the Main Menu, scroll down to Launch Shell.

Launch Shell
Figure 11: (English Only) Launch Shell

  1. Switch user from dellconsole to dellsupport: su dellsupport.

Switch user
Figure 12: (English Only) Switch user

  1. Go to the core-server folder: cd /opt/dell/server/core-server.

Type cd /opt/dell/server/core-server
Figure 13: (English Only) Type cd /opt/dell/server/core-server

  1. Type command: sudo vi PolicyService.config.

Type sudo vi PolicyService.config
Figure 14: (English Only) Type sudo vi PolicyService.config

  1. Enter i to edit file (notice at the bottom of the file –INSERT--, this indicates you can edit).

Enter i to edit file
Figure 15: (English Only) Enter i to edit file

  1. Scroll down the file to locate StrictValidation.

Locate StrictValidation
Figure 16: (English Only) Locate StrictValidation

  1. Change StrictValidation from true to false (located below).

Change StrictValidation from true to false
Figure 17: (English Only) Change StrictValidation from true to false

  1. Press Esc (notice the –-INSERT- - disappears).
  2. Type :wq (as shown below) this saves the changes that have been made.

Type :wq
Figure 18: (English Only) Type :wq

  1. After typing :wq and pressing enter, you see the below:

Confirm file updated
Figure 19: (English Only) Confirm file updated

  1. Notice that you return back to the core-server path. Type exit, to leave that specified path.

Type exit
Figure 20: (English Only) Type exit

  1. The next path, enter exit once more. You return to the Main Menu on the Virtual Appliance.

Main Menu on the Virtual Appliance
Figure 21: (English Only) Main Menu on the Virtual Appliance

  1. Select Basic Configuration.

Select Basic Configuration
Figure 22: (English Only) Select Basic Configuration

  1. Scroll down to Start Application.

Start Application
Figure 23: (English Only) Start Application

  1. You receive the below prompt:

Select Yes to Start the Application
Figure 24: (English Only) Select Yes to Start the Application

  1. Select Yes. Services begin to start.

Services begin to start
Figure 25: (English Only) Services begin to start

After Server Status indicates Running on each service, you will no longer receive: Error Validating Policy

v9.5 to 9.10

Steps to editing PolicyService.config

  1. Open the Virtual Appliance.
  2. Go to Basic Configuration.

Go to Basic Configuration
Figure 26: (English Only) Go to Basic Configuration

  1. Under Basic Configuration, scroll down to Stop Application (shown below).

Stop Application
Figure 27: (English Only) Stop Application

Confirm Serves Stopped
Figure 28: (English Only) Confirm Serves Stopped

  1. From Main Menu, scroll down to Launch Shell.

Launch Shell
Figure 29: (English Only) Launch Shell

  1. (Shown below) Switch user from ddpconsole to ddpsupport: su ddpsupport
  1. Go to the core-server folder: cd /opt/dell/server/core-server
  2. Type command: sudo vi PolicyService.config

Switch user, Go to the core-server folder, Type command: sudo vi PolicyService.config
Figure 30: (English Only) Switch user, Go to the core-server folder, Type command: sudo vi PolicyService.config

  1. Enter i to edit file (notice at the bottom of the file –INSERT--, this indicates you can edit).

Enter i to edit file
Figure 31: (English Only) Enter i to edit file

  1. Scroll down the file to locate StrictValidation

SLN304539_en_US__32ddpkm1020h
Figure 32: (English Only) Locate StrictValidation

  1. Change StrictValidation from true to false (located below).

Change StrictValidation from true to false
Figure 33: (English Only) Change StrictValidation from true to false

  1. Press Esc (notice the –-INSERT- - disappears).

Press Esc
Figure 34: (English Only) Press Esc

  1. Type :wq (as shown below) this saves the changes that have been made.

Type :wq
Figure 35: (English Only) Type :wq

  1. After typing :wq and pressing enter, you see the below:

Confirm file updated
Figure 36: (English Only) Confirm file updated

  1. Notice that you return back to the core-server path. Enter exit, to leave that specified path.

Type exit
Figure 37: (English Only) Type exit

  1. The next path, enter exit once more. You return to the Main Menu on the VE Appliance.

You return to the Main Menu on the VE Appliance
Figure 38: (English Only) You return to the Main Menu on the VE Appliance

  1. Scroll up to Basic Configuration.

Select Basic Configuration
Figure 39: (English Only) Select Basic Configuration

  1. Scroll down to Start Application.

Start Application
Figure 40: (English Only) Start Application

  1. You receive the below prompt:

Select Yes to start the VE services
Figure 41: (English Only) Select Yes to start the VE services

  1. Select Yes. Services begin to start.

Services begin to start
Figure 42: (English Only) Services begin to start

After Server Status indicates Running on each service, you will no longer receive: Error Validating Policy

To contact support, reference Dell Data Security International Support Phone Numbers.
Go to TechDirect to generate a technical support request online.
For additional insights and resources, join the Dell Security Community Forum.

Affected Products

Dell Encryption
Article Properties
Article Number: 000129785
Article Type: Solution
Last Modified: 06 Dec 2023
Version:  8
Find answers to your questions from other Dell users
Support Services
Check if your device is covered by Support Services.