
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Could not Install the Certificate Package error when adding a RIM node
Dec 11, 2023 10:08:37 AM
Dec 15, 2016 4:01:36 AM
Adding a Rim node fails with the following error:
Could not install the certificate package. Try again or check the log for details.
Review the following log file for additional error information: %ProgramData%\Qlik\Sense\Logs\Repository\Trace
1. Duplicate or invalid root certificate
213 20161212T154148.500+0200 ERROR LABQV System.Repository.Repository.Core.Certificates.CertificatePasswordVerificationWebService 21 759d16bb-c7cc-46fd-b733-ecde7c504993 NT AUTHORITY\SYSTEM An error occured when installing certificate package. Qlik.Sense.Communication.Security.Exceptions.SafeSecureException: Duplicate or invalid root certificates are not allowed; see logs?? at Qlik.Sense.Communication.Security.CertSetup.ThrowAndLogFatalRootError(String msg)?? at Qlik.Sense.Common.Security.Certificates.CertCreator.InstallCert(DotNetCert newCert)?? at Qlik.Sense.Common.Security.SecuritySetup.InstallSecurity(DotNetCert root, DotNetCert service, DotNetCert client)?? at Repository.Core.Certificates.CertificatePasswordVerificationWebService.HandleRequest(IHttpListenerRequestWrapper httpRequest, IHttpListenerResponseWrapper httpResponse) 759d16bb-c7cc-46fd-b733-ecde7c504993
To resolve:
This indicates that the system already has a root certificate in place that needs to be removed before new ones can be installed.
Remove any preexisting Qlik Sense certificates from the rim node. For instructions on how to do this refer to How to recreate or just delete certificates in Qlik Sense.
If you do not use Database Encryption (link), removing the certificates from the rim node can be safely done. Even so, always back up the certificates before proceeding.
2. Certificate of type Service was not valid
20190223T014326.849-0500 ERROR US1SXWN00563 System.Repository.Repository.Core.Certificates.CertificatePasswordVerificationWebService 20 83bfea24-27b9-4291-8b1a-b831e4c15c83 WMSERVICE\gfa82744 An error occured when installing certificate package. System.ArgumentException: Certificate of type Service was not valid!↵↓ at Qlik.Sense.Common.Security.SecuritySetup.CheckCert(DotNetCert signingCert, DotNetCert cert, CertType type)↵↓ at Qlik.Sense.Common.Security.SecuritySetup.InstallSecurity(DotNetCert root, DotNetCert service, DotNetCert client)↵↓ at Repository.Core.Certificates.CertificatePasswordVerificationWebService.HandleRequest(IHttpListenerRequestWrapper httpRequest, IHttpListenerResponseWrapper httpResponse, IHttpRecording httpRecording) 83bfea24-27b9-4291-8b1a-b831e4c15c83
To resolve:
- Make sure service account has local Admin Right.
- Make sure the service account has the right to all Qlik folders. (Check the user is having rights on related folders)
- Make sure that the service account has the right to C:\ProgramData\Microsoft\Crypto folders. (Provide full control to service account)
- Reboot the server
- Make sure that the main security policies are disabled:
- System Cryptography: Force strong key protection for user keys stored on the computer (It was enabled in the customer's environment )
- System Cryptography: Use FIPS compliant algorithms for encryption, hashing, and signing.
- All "Public Key Policies" are disabled. ( Security Settings > Public Key Policies).
- Check if some TLS disabled (1.2, 1.0, SSL 3.0)
- Try manually add the certificates.
- Uninstall the RIM node and reinstall, i fissue persists, proceed to next step
- Test by adding another RIM nodes and see if that works or get the same issue just to mitigate that issue is not with the central server.
Follow all the steps in the sequence mentioned above and then disable the Cryptography policies.
Related Content:
Incorrect password error received when adding a Qlik Sense Rim node
Error when adding rim node to new Qlik Sense install
Environment:
Qlik Sense Enterprise on Windows