Knowledge

Unable to Install Qlik Sense patch with FIPS policy enabled

Article Number: 000043029 | Last Modified: 2019/03/21

Description

System Admin trying to apply a Qlik Sense patch and it fails, the machine has FIPS enabled.
The installation logs have the following error:

- Applying replace file action: \ServiceDispatcher\RELEASE_LABEL

- Replace file action apply \ServiceDispatcher\RELEASE_LABEL was successful: true

- Error! Could not create Installation file. Details 'Exception has been thrown by the target of an invocation.'.

- Rolling back apply of Qlik.Installer.Actions.FileActions.ReplaceFileAction  \AboutService\custom-system-info.json

Environmental:

Qlik Sense Enterprise all versions

Cause

FIPS considers some hashing algorithms insecure like MD5 and block applications the moment it tries to use those MD5 algorithms. Unfortunately we use MD5 to generate hash values for some files in order for the Qlik_Sense_Update.exe to determine it is accessing the expected files.

Resolution

Create a file in the same directory as the installer naming it the same name as the update.config
In the installer paste in this XML information:

<?xml version="1.0" encoding="utf-8" ?>
<configuration>
	<runtime>
		<enforceFIPSPolicy enabled="false" />
	</runtime>
</configuration>

Save the file
Re-run the installer

Example:

Installation file name: Qlik_Sense_update.exe
Config file name: Qlik_Sense_update.exe.config

Get Answers

Find Answers

Qlik Community

Collaborate with over 60,000 Qlik technologists and members around the world to get answers to your questions, and maximize success.

Join Us

Get Support

Have a Question?

Search Qlik's Support Knowledge database or request assisted support for highly complex issues.

Submit a case

Talk with a Representative

Critical Issues

Experiencing a serious issue, please contact us by phone. For Data Integration related issues please refer to your onboarding documentation for current phone number.

Call Us