Digital Certificates implementation issue in dual forest no trust relationship

Environment is going to a distributed component installation among multiple servers across Active Directory Forests having no trust relationship between the Forests.  Servers not in the same Forest and not running QlikView Server service may not be able to properly get the digital certificate for service communications.

This is a known issue with ID 61012 which is addressed in 11.20 SR3, but there is a workaround for the issue in earlier releases.

Root Cause:

Problem occurs when the QVWS sends "POST /INIT/Service HTTP/1.1" request to the QMS, during configuration for the server in the QMC. The QMS replies with HTTP/1.1 401 Unauthorized, WWW-Authenticate: NTLM. This initiates an NTLM authentication handshake which will fail. The QMS should not send an NTLM challenge to the QVWS during configuration if Certificate Trust is selected. 

Steps for workaround:

1. On the server(s) that are not able to be contacted by the QlikView Management Service via the QlikView Management Console, you will first need to modify the QlikView Server installation and add the QlikView Server component on each server having the communication issue
2. Be sure the QlikView Server service is started on each of the servers having the issue
3. Go to the server running the QlikView Management Service and launch the QlikView Management Console there
4. Proceed to the System tab
5. Click the Setup submenu
6. Click on the QlikView Servers folder and to the right click the green add icon to add a resource for each new QlikView Server service you had to add to the environment.
7. Verify the QVP URLs point to the correct server
8. Click the Apply button and the certificate installation dialog should appear with the URL and password you will need to get the digital certificate installed to the server(s)
9. Once you have successfully registered the certificate on the server(s) having issues, you may remove the QlikView Server resources you created in step 6 above
10. Proceed to each server you installed the QlikView Server service to and remove it
11. Optional - It may be necessary to stop the QlikView Settings Service, rename the WebServer folder in ProgramData\QlikTech, start the service again, recreate the resource in the QlikView Management Console via System - Setup - QlikView Web Servers in order to get everything properly functioning