The Qlik Sense Management Console does not start. When attempting to recreate certificates, the bootstrap command fails.
Management Console does not start - "Fatal exception during startup attempted to perform an unauthorized operation" or "Malware Behavior: Windows EFS abuse".
Starting the QMC fails with the following error in the Windows Event logs (example based on McAfee error):
DOMAIN\qlikviewadmin ran Repository.exe, which tried to access C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\xxxxxxxxxx violating the rule "Malware Behavior : Windows EFS abuse", and was blocked. For information about how to respond to this event, see KB85494.
Attempting to recreate the certificates using bootstrap following the instructions of How to recreate or just delete certificates in Qlik Sense - No access to QMC or Hub fails with:
Fatal exception during startup Attempted to perform an unauthorized operation
Resolution
McAfee specific configuration:
Malware Behavior: Windows EFS abuse setting for 'Block' is checked, checkbox needs to be unchecked.
For more information, see McAfee at detailed instructions.
Exclude Qlik Sense specific folders and files from Virus Scans on all Sense nodes:
See Qlik Sense Folder And Files To Exclude From AntiVirus Scanning for reference.
Cause:
Active Anti-virus or malware scans have wrongfully identified the Qlik processes as malware and aborted the command.
