Environment:
Qlik Sense all versions
1. Dedicated service user is trying to access configuration files related to Qlik Sense, and receiving errors in Windows event logs:
'CProcessManager::FileExists: FindFirstFileW failure (2); The system cannot find the file specified.
Target = C:\Program Files\Qlik\Sense\ServiceDispatcher\services.conf'
'CProcessManager::FileExists: FindFirstFileW failure (2); The system cannot find the file specified.
Target = C:\Program Files\Qlik\Sense\ServiceDispatcher\services-server.conf'
2. Postgres user is trying to access configuration files related to postgres DB, and receiving errors in Windows event logs:
'postgres: could not access the server configuration file "C:/ProgramData/Qlik/Sense/Repository/PostgreSQL/9.6/postgresql.conf": No such file or directory
Configuration files are being encrypted, therefore service account and postgres user can't access them and run the services properly:
Resolution:
Possible root cause is a system infected by malware, decrypting information. Disconnect the server from the environment immediatelly to isolate the operating system and take actions to clean them. Ensure that the host operating system is always correctly patched and updated to prevent security issues.
Option to restore the Qlik Sense environment:
- Is a full back up available? Revert to the a previous system point.
- If APPS are on network share, verify that potential harmful data has been transfered.