Skip to main content
Announcements
Have questions about Qlik Connect? Join us live on April 10th, at 11 AM ET: SIGN UP NOW

Change QlikView Services communication from Certificate Trust to Windows Group Authentication (UseWinAuthentication)

No ratings
cancel
Showing results for 
Search instead for 
Did you mean: 
Sonja_Bauernfeind
Digital Support
Digital Support

Change QlikView Services communication from Certificate Trust to Windows Group Authentication (UseWinAuthentication)

Last Update:

Apr 29, 2022 4:38:20 AM

Updated By:

Sebastian_Linser

Created date:

Jul 13, 2018 10:44:56 AM

The QlikView Services communication can be changed from Certificate Trust to the traditional Windows Group Authentication. 

For basic instructions, see Configuring servers with digital certificates.

If the services need to be manually reconfigured, each service needs to have its configuration files modified.  

  1. Stop all Services.

  2. Change the “UseWinAuthentication” entry from “false” to “true” in the following files:
    1. C:\Program Files\QlikView\Management Service\QVManagementService.exe.config
    2. C:\Program Files\QlikView\Directory ServiceConnector\QVDirectoryServiceConnector.exe.config
    3. C:\Program Files\QlikView\Distribution Service\QVDistributionService.exe.config
    4. If using QlikView WebServer, C:\Program Files\QlikView\Server\Web Server\QVWebServer.exe.config
    5. If using IIS, the 2 following files: C:\Program Files\QlikView\Server\Web Server Settings\QVWebServerSettingsService.exe.config and C:\Program Files\QlikView\Server\QlikViewClients\QlikViewAjax\web.config

  3. Open the C:\ProgramData\QlikTech\QlikViewServer\Settings.ini file in Notepad and remove EnableSSL=1 or change the 1 to a 0 in the [Settings 7] section. save and close the file.

  4. (For 12.50 and later:) Open the C:\Program Files\QlikView\ServiceDispatcher\services.conf file.
    Change from -qv-auth-mode=cert to -qv-auth-mode=ntlm (or other modes than cert you use)

  5. An additional step is necessary. Services will fail to start due to undecryptable data at first. At start-up, each service validates all its encrypted data entries to ensure they are accessible. If the service encounters data that cannot be decrypted, it reports an error and stops execution.

    Erase corrupted data by temporarily enabling the hidden configuration EraseUndecryptableData flag.

    In each of the above-mentioned configuration files (except the QlikView Server settings.ini), add the EraseUndecryptableData entry and set it to true.

    Example: 
    <add key="UseWinAuthentication" value="true"></add>
    <add key="EraseUndecryptableData" value="true"></add>​
  6. Start each service (QlikView Management Service, Distribution Service, Directory Service Connector, WebServer Service) once.
  7. Stop the service again, open the configuration file and remove the EraseUndecryptableData entry.
  8. Save the file.

  9. Restart the services one by one. 

 

Environment: 

QlikView 

Labels (1)
Version history
Last update:
‎2022-04-29 04:38 AM
Updated by: