When running the Qlik Sense Repository in Bootstrap mode in order to change the Central Node hostname or recreate certificates, the process may end with a big error message. Consulting the Log\Repository\Trace System log file, the following message appears right before the log file ends:
The requested operation cannot be completed. The computer must be trusted for delegation and the current user account must be configured to allow delegation.
Environment:
Cause:
This is caused by several Microsoft security updates present in Windows 8.1 and newer, including Server editions. A registry key must be created to avoid communication issues, after applying said patches.
Not limited to the patches below:
2992611, 3000850, ...
Resolution:
- Open Registry Editor on the affected machine (regedit.exe)
- Navigate to HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography\Protect\Providers\df9d8cd0-1501-11d1-8c7a-00c04fc297eb (this last part is the same for all machines)
- Create a new 32bit DWORD, named "ProtectionPolicy"
- Double click the key again and set a value of "1"
- Restart the affected computer
- Run Bootstrap again, this time no errors should arise and certificates should be recreated correctly
If Bootstrap mode still doesn't complete successfully after applying this fix, please collect the error message and Repository log files and provide them to your Qlik Support Engineer for further troubleshooting.
