Skip to main content
Announcements
Have questions about Qlik Connect? Join us live on April 10th, at 11 AM ET: SIGN UP NOW

Disabling Kerberos encryption method RC4_HMAC_MD5 causes QlikView Server to disconnect

No ratings
cancel
Showing results for 
Search instead for 
Did you mean: 
Sonja_Bauernfeind
Digital Support
Digital Support

Disabling Kerberos encryption method RC4_HMAC_MD5 causes QlikView Server to disconnect

Last Update:

Jun 8, 2023 3:13:54 AM

Updated By:

Sonja_Bauernfeind

Created date:

Dec 9, 2016 10:22:58 AM

A Windows Group Policy might disable the use of the RC4_HMAC_MD5 encryption method.

In effect, the QlikView Server will show as disconnected in the Management console. Publishing / Distributing files to it will fail. And any attempt to open documents using qvp:\servername will also disconnect. 

Review the local machines' Local Security Policy. 

  1. Open the Local Security Policy Panel
  2. Switch to Security Options
  3. Locate: Network security: Configure encryption types allowed for Kerberos 
  4. Is it disabled? See Fig 1.

    Fig 1Fig 1

 



Resolution

  1. During the disabling of this method, an additional configuration step is required on the Microsoft OS. See Windows Configurations for Kerberos Supported Encryption Type | learn.microsoft.com  for details and instructions.

  2. Next, the AES 128 bit encryption needs to be enabled on:
    • the Service Account running QlikView
    • the Service Account(s) running the NPrinting Server/Engine(s) (if NPrinting Server is in use)

      NOTE: The NPrinting Service Account user must be different that the QlikView Service Account. See Dedicated NPrinting Server & Engine Service Account


      accounts upports kerberos aes 128.png

 

Kerberos encryption method RC4_HMAC_MD5 can be disabled in QlikView version May 2022  (12.70).
 

Related articles

Disable RC4 stream cipher in QlikView May 2022 (12.70) SR1 or higher

 

Internal Investigation ID:

QV-22276

 

Labels (1)
Comments
upasana_s
Contributor
Contributor

HI Sonja ,

 

Does this mean we should have this  RC4_HMAC_MD5 enabled on server  mandatory ?

We are trying to migrate to 2019 server from 2012 and on 2019 we are not able to apply license after installing Qlikview  because QVS is always showing as down even if its part of Administrators , QlikView Administrators , all ports are open , have access to Programdata\QlikTechfolders .

 

Sonja_Bauernfeind
Digital Support
Digital Support

Hello @upasana_s 

As per this article, it does not need to be enabled, but additional steps are required as documented in the article (if this is indeed the issue you are experiencing - there are a number of different root causes that could lead to the QVS to show as disconnected).

I would recommend testing the steps in this article and then also reviewing your log files and these articles: 

QlikView Services disconnected in QlikView Management Console: single service error, or 2 services a... 
Troubleshooting Disconnected Services in the QlikView Management Console (QMC)  

Should none of this help, please create a post about your issue including your troubleshooting steps and error information here:  QlikView Administration 

All the best,
Sonja 

 

Version history
Last update:
‎2023-06-08 03:13 AM
Updated by: