The QlikView Services communication can be changed from Certificate Trust to the traditional Windows Group Authentication.
For basic instructions, see Configuring servers with digital certificates.
If the services need to be manually reconfigured, each service needs to have its configuration files modified.
- Stop all Services.
- Change the “UseWinAuthentication” entry from “false” to “true” in the following files:
- C:\Program Files\QlikView\Management Service\QVManagementService.exe.config
- C:\Program Files\QlikView\Directory ServiceConnector\QVDirectoryServiceConnector.exe.config
- C:\Program Files\QlikView\Distribution Service\QVDistributionService.exe.config
- If using QlikView WebServer, C:\Program Files\QlikView\Server\Web Server\QVWebServer.exe.config
- If using IIS, the 2 following files: C:\Program Files\QlikView\Server\Web Server Settings\QVWebServerSettingsService.exe.config and C:\Program Files\QlikView\Server\QlikViewClients\QlikViewAjax\web.config
- Open the C:\ProgramData\QlikTech\QlikViewServer\Settings.ini file in Notepad and remove EnableSSL=1 or change the 1 to a 0 in the [Settings 7] section. save and close the file.
- (For 12.50 and later:) Open the C:\Program Files\QlikView\ServiceDispatcher\services.conf file.
Change from -qv-auth-mode=cert to -qv-auth-mode=ntlm (or other modes than cert you use)
- An additional step is necessary. Services will fail to start due to undecryptable data at first. At start-up, each service validates all its encrypted data entries to ensure they are accessible. If the service encounters data that cannot be decrypted, it reports an error and stops execution.
Erase corrupted data by temporarily enabling the hidden configuration EraseUndecryptableData flag.
In each of the above-mentioned configuration files (except the QlikView Server settings.ini), add the EraseUndecryptableData entry and set it to true.
Example:
<add key="UseWinAuthentication" value="true"></add>
<add key="EraseUndecryptableData" value="true"></add>
- Start each service (QlikView Management Service, Distribution Service, Directory Service Connector, WebServer Service) once.
- Stop the service again, open the configuration file and remove the EraseUndecryptableData entry.
- Save the file.
- Restart the services one by one.
Environment:
QlikView