QlikView Services have the status 'disconnected' in the QlikView Management Console although they are definitely up and running. You see the following error in the respective QlikView service log:
SSL: Main loop error: -1
SSL: Decrypt Message Error: -2146893008
Environment:
QlikView
Microsoft has delivered patches that change how TLS communication is handled in Windows. It affects any application that relies on the .NET framework.
As QlikView 11.20 (up to SR15) relies on an older version of the framework, it cannot communicate using TLS 1.2 so allowing the QlikView binaries is the only workaround for the time being.
Resolution:
The issue can be resolved by uninstalling the following Windows Updates depending on the Server OS version:
Windows Server 2012 R2 with .Net Framework 4.6/4.6.1
KB3135998: https://support.microsoft.com/en-us/kb/3135998
KB3142036: https://support.microsoft.com/en-us/kb/3142036
Windows Server 2008 R2 with .Net Framework 4.5.2
KB3142033: https://support.microsoft.com/en-us/kb/3142033
If uninstalling the updates is not an option, the following workarounds are available currently:
For QlikView 11.20
Upgrade QlikView
For QlikView 12.x
- TLS 1.2 will need to be enabled by running the powershell script attached
- Allow all QlikView (and IIS service if being used) binaries by running the Version 12 specific .reg file attached to this article. It should be run on every server that runs a QlikView (and IIS) service. If the customer has installed QlikView in a custom folder, you need to edit the reg-file accordingly. I.e. Correct the file paths.
Please ensure that you have a system backup available in case of unforeseen issues. Should you have any questions regarding the workaround please contact Support.
