QlikView Management Service (QMS) unable to connect to QlikView Settings Service (QVWS) on DMZ server

Implementation uses a QVWS resource in a DMZ and is using Digital Certificate versus Security Group option for Qlik service authentication.  The QMS is unable to complete connection to the QVWS resource to get configuration information, but the certificates are able to be pushed to the QVWS resource just fine.  On the QVWS server, the Service_key.txt and Config.xml files are not created either.

In the QMS log, the following error may appear:
20171018T124717.268-0500    Error    System.ServiceModel.CommunicationException: ANY did not respond to request.
Last exception (for http://QVWS-Server-Name:4750/QVWS/Service): ANY did not respond to request.
Last exception (for http://QVWS-Server-Name:4750/QVWS/Service): The HTTP request was forbidden with client authentication scheme 'Anonymous'. ---> System.ServiceModel.CommunicationException: ANY did not respond to request.
Last exception (for http://QVWS-Server-Name:4750/QVWS/Service): The HTTP request was forbidden with client authentication scheme 'Anonymous'. ---> System.ServiceModel.Security.MessageSecurityException: The HTTP request was forbidden with client authentication scheme 'Anonymous'. ---> System.Net.WebException: The remote server returned an error: (403) Forbidden. ||    at System.Net.HttpWebRequest.GetResponse() ||    at System.ServiceModel.Channels.HttpChannelFactory`1.HttpRequestChannel.HttpChannelRequest.WaitForReply(TimeSpan timeout) ||    --- End of inner exception stack trace --- ||  || Server stack trace:  ||    at System.ServiceModel.Channels.HttpChannelUtilities.ValidateAuthentication(HttpWebRequest request, HttpWebResponse response, WebException responseException, HttpChannelFactory`1 factory) ||    at System.ServiceModel.Channels.HttpChannelUtilities.ValidateRequestReplyResponse(HttpWebRequest request, HttpWebResponse response, HttpChannelFactory`1 factory, WebException responseException, ChannelBinding channelBinding) ||    at System.ServiceModel.Channels.HttpChannelFactory`1.HttpRequestChannel.HttpChannelRequest.WaitForReply(TimeSpan timeout) ||    at System.ServiceModel.Channels.RequestChannel.Request(Message message, TimeSpan timeout) ||    at System.ServiceModel.Channels.ServiceChannel.Call(String action, Boolean oneway, ProxyOperationRuntime operation, Object[] ins, Object[] outs, TimeSpan timeout) ||    at System.ServiceModel.Channels.ServiceChannelProxy.InvokeService(IMethodCallMessage methodCall, ProxyOperationRuntime operation) ||    at System.ServiceModel.Channels.ServiceChannelProxy.Invoke(IMessage message) ||  || Exception rethrown at [0]:  ||    at System.Runtime.Remoting.Proxies.RealProxy.HandleReturnMessage(IMessage reqMsg, IMessage retMsg) ||    at System.Runtime.Remoting.Proxies.RealProxy.PrivateInvoke(MessageData& msgData, Int32 type) ||    at PIX.Services.V12.Api2.IQTService2.GetKey() ||    at PIX.Services.ClientSupport.ClusterBase`1.Invoke[TR](CallType callType, Func`2 func, List`1 allResults, QlikMethodBehavior methodBehavior) ||    --- End of inner exception stack trace --- ||  || Server stack trace:  ||    at PIX.Services.ClientSupport.ClusterBase`1.Invoke[TR](CallType callType, Func`2 func, List`1 allResults, QlikMethodBehavior methodBehavior) ||    at PIX.Services.ClientSupport.ClusterBase`1.Invoke[TR](CallType callType, Func`2 func) ||    at PIX.Services.ClientSupport.ServiceKeyClientMessageInspector.BeforeSendRequest(Message& request, IClientChannel channel) ||    at System.ServiceModel.Dispatcher.ImmutableClientRuntime.BeforeSendRequest(ProxyRpc& rpc) ||    at System.ServiceModel.Channels.ServiceChannel.PrepareCall(ProxyOperationRuntime operation, Boolean oneway, ProxyRpc& rpc) ||    at System.ServiceModel.Channels.ServiceChannel.Call(String action, Boolean oneway, ProxyOperationRuntime operation, Object[] ins, Object[] outs, TimeSpan timeout) ||    at System.ServiceModel.Channels.ServiceChannelProxy.InvokeService(IMethodCallMessage methodCall, ProxyOperationRuntime operation) ||    at System.ServiceModel.Channels.ServiceChannelProxy.Invoke(IMessage message) ||  || Exception rethrown at [0]:  ||    at System.Runtime.Remoting.Proxies.RealProxy.HandleReturnMessage(IMessage reqMsg, IMessage retMsg) ||    at System.Runtime.Remoting.Proxies.RealProxy.PrivateInvoke(MessageData& msgData, Int32 type) ||    at PIX.Services.V12.Api2.IQTService2.GetSystemInformation() ||    at PIX.Services.ClientSupport.ClusterBase`1.Invoke[TR](CallType callType, Func`2 func, List`1 allResults, QlikMethodBehavior methodBehavior) ||    --- End of inner exception stack trace --- ||    at PIX.Services.ClientSupport.ClusterBase`1.Invoke[TR](CallType callType, Func`2 func, List`1 allResults, QlikMethodBehavior methodBehavior) ||    at QMSBackendCore.Service.ServiceImpl.<>c.<GetSystemInformation>b__149_6(QvWebServiceResource qvws) ||    at QMSBackendCore.Service.ServiceImpl.GetAllInCluster[T](IList`1 nodes, Func`2 fetchClusterInfo, Func`2 nodeServiceName)

If the service URL uses a fully qualified name, there will be a mismatch in the certificate resolution, which will result in the configuration information not being able to be pulled back to the QlikView Management Console (QMC).  

Ensure the service URL for the QVWS resource in the General tab settings is using http protocol, not https, and that the server name is not a fully qualified name, as the SSL certificate used for the digital certificate is a self-signed cert generated by Qlik, and is associated to the server name, not a fully qualified name, and using a fully qualified name will likely result in errors in establishing an authenticated session between the QMS and QVWS services.