Validating whether the Qlik Sense root CA certificate has the CA:TRUE attribute can be done using one of the following methods:
1) Run the tool located here https://github.com/StevenJDH/C2-Validator in the Releases section. This will automatically check whether the installed Root certificate meets the needed requirements.
2) The same check can be performed manually using the following steps:
- Open the Local Machine/Computer certificate store.
- In the Trust Root Certification Authorities section, double-click on the internal Qlik Root certificate.
- Under the Details tab for the certificate, filter by Critical Extension Only.
- Finally, check that Basic Constraints attribute, and make sure it contains both of the following values "Subject Type=CA". If it does not, then this certificate is affected by the change.
Environments:
- Qlik Sense February 2020
- Qlik Sense November 2019
- Qlik Sense September 2019
- Qlik Sense June 2019
- Qlik Sense April 2019
- Qlik Sense February 2019