<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>article Qlik Sense Enterprise on Windows: Repository error Fatal exception during startup Attempted to perform an unauthorized operation in Official Support Articles</title>
    <link>https://community.qlik.com/t5/Official-Support-Articles/Qlik-Sense-Enterprise-on-Windows-Repository-error-Fatal/ta-p/1900616</link>
    <description>&lt;P&gt;Your Qlik Sense Enterprise on Windows environment suddenly stopped working. When checking the Qlik Sense windows services, you are observing Qlik Sense Repository is stopped whilst the other is running fine. You try to start the Qlik Sense Repository service but it keeps on stopping after a few seconds.&amp;nbsp;&lt;/P&gt;
&lt;P&gt;The &lt;STRONG&gt;System_Repository&amp;nbsp;&lt;/STRONG&gt;log (&lt;FONT face="courier new,courier"&gt;%ProgramData%\Qlik\Sense\Log\Repository\Trace\YourServerName_System_Repository.txt)&lt;/FONT&gt;&amp;nbsp;shows the following error:&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;LI-CODE lang="markup"&gt;115 20220302T083819.725+0100 ERROR qlikserver1.domain.local System.Repository.Repository.QRSMain 6 3266cf81-5a37-4d34-b74f-70a6fc225764 domain\qvservice Fatal exception during startup Attempted to perform an unauthorized operation.   at System.Security.Cryptography.Utils.SetKeySetSecurityInfo(SafeProvHandle hProv, CryptoKeySecurity cryptoKeySecurity, AccessControlSections accessControlSections)↵↓   at System.Security.Cryptography.Utils.GetKeyPairHelper(CspAlgorithmType keyType, CspParameters parameters, Boolean randomKeyContainer, Int32 dwKeySize, SafeProvHandle&amp;amp; safeProvHandle, SafeKeyHandle&amp;amp; safeKeyHandle)↵↓   at System.Security.Cryptography.RSACryptoServiceProvider.GetKeyPair()↵↓   at System.Security.Cryptography.RSACryptoServiceProvider..ctor(Int32 dwKeySize, CspParameters parameters, Boolean useDefaultKeySize)↵↓   at Qlik.Sense.Communication.Security.Certificates.DotNetCert.SetPrivateKeyAccess(IdentityReference identityReference)↵↓   at Repository.Core.Bootstrap.RepositoryBootstrapper.Install(BootstrapState bootstrapState)↵↓   at Repository.Core.Bootstrap.BootstrapHandler.Install(BootstrapState bootstrapState)↵↓   at Repository.Core.Bootstrap.BootstrapHandler.Bootstrap(BootstrapState bootstrapState)↵↓   at Repository.QRSMain.Bootstrap()↵↓   at Repository.QRSMain.Main()↵↓   at Repository.QRSMain.Run(String[] args, Action`1 terminate) 3266cf81-5a37-4d34-b74f-70a6fc225764

&lt;/LI-CODE&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;The Windows Application log also prints this McAfee error at the same time you try starting the repository service:&amp;nbsp;&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;LI-CODE lang="markup"&gt;Event: 3  McAfee Endpoint security

EventID= 18060 

Domain\qvservice ran Qlik\sense\repository\repository.exe, which tried to access C:\programdata\microsoft\crypto\RSA\MachineKeys\&amp;lt;Some GUID&amp;gt; , violating the rule "Malware Behavior: Windows EFS abuse", and was blocked. For information about how to respond to this event, see KB85494&lt;/LI-CODE&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;H4&gt;&lt;FONT color="#339966"&gt;&lt;STRONG&gt;Environment&lt;/STRONG&gt;&lt;/FONT&gt;&lt;/H4&gt;
&lt;P class="lia-indent-padding-left-30px"&gt;&lt;LI-PRODUCT title="Qlik Sense Enterprise on Windows" id="qlikSenseEnterpriseWindows"&gt;&lt;/LI-PRODUCT&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;H3&gt;&lt;FONT color="#339966"&gt;&lt;STRONG&gt;Resolution&lt;/STRONG&gt;&lt;/FONT&gt;&lt;/H3&gt;
&lt;P&gt;To mitigate the problem as soon as possible,&amp;nbsp; please reach out to your Internal IT team in charge of administering McAfee and request them to&amp;nbsp;disable the exploit prevention on McAfee - You could set up a new container in McAfee, add all your Qlik Sense servers, and set a policy to disable the exploit prevention.&amp;nbsp;&lt;/P&gt;
&lt;P&gt;A longer-term solution is to investigate with the vendor why this error suddenly came in and make sure all Qlik Services (processes) are excluded from any security software scan.&amp;nbsp;&lt;/P&gt;
&lt;H4&gt;&amp;nbsp;&lt;/H4&gt;
&lt;H4&gt;&lt;FONT color="#339966"&gt;&lt;STRONG&gt;Cause&lt;/STRONG&gt;&lt;/FONT&gt;&lt;/H4&gt;
&lt;P&gt;Qlik Sense&amp;nbsp;repository.exe is no longer able to access to local computer personal certificate store, which prevents the service to start.&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;H4&gt;&lt;FONT color="#339966"&gt;&lt;STRONG&gt;Related Content&amp;nbsp;&lt;/STRONG&gt;&lt;/FONT&gt;&lt;/H4&gt;
&lt;P class="lia-indent-padding-left-30px"&gt;&lt;A href="https://forums.mcafee.com/t5/General-Discussions/mcafee-EPO-ENS-An-unathorized-escalation-of-privilege-was/m-p/693168#M36485" target="_blank" rel="noopener"&gt;Complete list of event IDs for Endpoint Security&lt;/A&gt;&lt;BR /&gt;&lt;A href="https://community.mcafee.com/t5/Endpoint-Security-ENS/Malware-Behavior-Windows-EFS-Abuse/td-p/646769" target="_blank" rel="noopener"&gt;Malware Behavior: Windows EFS Abuse&lt;/A&gt;&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;</description>
    <pubDate>Mon, 06 Feb 2023 14:24:33 GMT</pubDate>
    <dc:creator>Alexis_Touet</dc:creator>
    <dc:date>2023-02-06T14:24:33Z</dc:date>
    <item>
      <title>Qlik Sense Enterprise on Windows: Repository error Fatal exception during startup Attempted to perform an unauthorized operation</title>
      <link>https://community.qlik.com/t5/Official-Support-Articles/Qlik-Sense-Enterprise-on-Windows-Repository-error-Fatal/ta-p/1900616</link>
      <description>&lt;P&gt;Your Qlik Sense Enterprise on Windows environment suddenly stopped working. When checking the Qlik Sense windows services, you are observing Qlik Sense Repository is stopped whilst the other is running fine. You try to start the Qlik Sense Repository service but it keeps on stopping after a few seconds.&amp;nbsp;&lt;/P&gt;
&lt;P&gt;The &lt;STRONG&gt;System_Repository&amp;nbsp;&lt;/STRONG&gt;log (&lt;FONT face="courier new,courier"&gt;%ProgramData%\Qlik\Sense\Log\Repository\Trace\YourServerName_System_Repository.txt)&lt;/FONT&gt;&amp;nbsp;shows the following error:&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;LI-CODE lang="markup"&gt;115 20220302T083819.725+0100 ERROR qlikserver1.domain.local System.Repository.Repository.QRSMain 6 3266cf81-5a37-4d34-b74f-70a6fc225764 domain\qvservice Fatal exception during startup Attempted to perform an unauthorized operation.   at System.Security.Cryptography.Utils.SetKeySetSecurityInfo(SafeProvHandle hProv, CryptoKeySecurity cryptoKeySecurity, AccessControlSections accessControlSections)↵↓   at System.Security.Cryptography.Utils.GetKeyPairHelper(CspAlgorithmType keyType, CspParameters parameters, Boolean randomKeyContainer, Int32 dwKeySize, SafeProvHandle&amp;amp; safeProvHandle, SafeKeyHandle&amp;amp; safeKeyHandle)↵↓   at System.Security.Cryptography.RSACryptoServiceProvider.GetKeyPair()↵↓   at System.Security.Cryptography.RSACryptoServiceProvider..ctor(Int32 dwKeySize, CspParameters parameters, Boolean useDefaultKeySize)↵↓   at Qlik.Sense.Communication.Security.Certificates.DotNetCert.SetPrivateKeyAccess(IdentityReference identityReference)↵↓   at Repository.Core.Bootstrap.RepositoryBootstrapper.Install(BootstrapState bootstrapState)↵↓   at Repository.Core.Bootstrap.BootstrapHandler.Install(BootstrapState bootstrapState)↵↓   at Repository.Core.Bootstrap.BootstrapHandler.Bootstrap(BootstrapState bootstrapState)↵↓   at Repository.QRSMain.Bootstrap()↵↓   at Repository.QRSMain.Main()↵↓   at Repository.QRSMain.Run(String[] args, Action`1 terminate) 3266cf81-5a37-4d34-b74f-70a6fc225764

&lt;/LI-CODE&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;The Windows Application log also prints this McAfee error at the same time you try starting the repository service:&amp;nbsp;&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;LI-CODE lang="markup"&gt;Event: 3  McAfee Endpoint security

EventID= 18060 

Domain\qvservice ran Qlik\sense\repository\repository.exe, which tried to access C:\programdata\microsoft\crypto\RSA\MachineKeys\&amp;lt;Some GUID&amp;gt; , violating the rule "Malware Behavior: Windows EFS abuse", and was blocked. For information about how to respond to this event, see KB85494&lt;/LI-CODE&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;H4&gt;&lt;FONT color="#339966"&gt;&lt;STRONG&gt;Environment&lt;/STRONG&gt;&lt;/FONT&gt;&lt;/H4&gt;
&lt;P class="lia-indent-padding-left-30px"&gt;&lt;LI-PRODUCT title="Qlik Sense Enterprise on Windows" id="qlikSenseEnterpriseWindows"&gt;&lt;/LI-PRODUCT&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;H3&gt;&lt;FONT color="#339966"&gt;&lt;STRONG&gt;Resolution&lt;/STRONG&gt;&lt;/FONT&gt;&lt;/H3&gt;
&lt;P&gt;To mitigate the problem as soon as possible,&amp;nbsp; please reach out to your Internal IT team in charge of administering McAfee and request them to&amp;nbsp;disable the exploit prevention on McAfee - You could set up a new container in McAfee, add all your Qlik Sense servers, and set a policy to disable the exploit prevention.&amp;nbsp;&lt;/P&gt;
&lt;P&gt;A longer-term solution is to investigate with the vendor why this error suddenly came in and make sure all Qlik Services (processes) are excluded from any security software scan.&amp;nbsp;&lt;/P&gt;
&lt;H4&gt;&amp;nbsp;&lt;/H4&gt;
&lt;H4&gt;&lt;FONT color="#339966"&gt;&lt;STRONG&gt;Cause&lt;/STRONG&gt;&lt;/FONT&gt;&lt;/H4&gt;
&lt;P&gt;Qlik Sense&amp;nbsp;repository.exe is no longer able to access to local computer personal certificate store, which prevents the service to start.&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;H4&gt;&lt;FONT color="#339966"&gt;&lt;STRONG&gt;Related Content&amp;nbsp;&lt;/STRONG&gt;&lt;/FONT&gt;&lt;/H4&gt;
&lt;P class="lia-indent-padding-left-30px"&gt;&lt;A href="https://forums.mcafee.com/t5/General-Discussions/mcafee-EPO-ENS-An-unathorized-escalation-of-privilege-was/m-p/693168#M36485" target="_blank" rel="noopener"&gt;Complete list of event IDs for Endpoint Security&lt;/A&gt;&lt;BR /&gt;&lt;A href="https://community.mcafee.com/t5/Endpoint-Security-ENS/Malware-Behavior-Windows-EFS-Abuse/td-p/646769" target="_blank" rel="noopener"&gt;Malware Behavior: Windows EFS Abuse&lt;/A&gt;&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;</description>
      <pubDate>Mon, 06 Feb 2023 14:24:33 GMT</pubDate>
      <guid>https://community.qlik.com/t5/Official-Support-Articles/Qlik-Sense-Enterprise-on-Windows-Repository-error-Fatal/ta-p/1900616</guid>
      <dc:creator>Alexis_Touet</dc:creator>
      <dc:date>2023-02-06T14:24:33Z</dc:date>
    </item>
    <item>
      <title>Re: Qlik Sense Enterprise on Windows: Repository error Fatal exception during startup Attempted to perform an unauthorized operation</title>
      <link>https://community.qlik.com/t5/Official-Support-Articles/Qlik-Sense-Enterprise-on-Windows-Repository-error-Fatal/tac-p/2499458#M15179</link>
      <description>&lt;P&gt;Ran into this today after upgrading a RIM node, McAfee has been rebranded as Trellix after merging with FireEye &lt;A href="https://en.wikipedia.org/wiki/Trellix" target="_blank"&gt;https://en.wikipedia.org/wiki/Trellix&lt;/A&gt;&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;&lt;span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="p_verkooijen_0-1735311358581.png" style="width: 720px;"&gt;&lt;img src="https://community.qlik.com/t5/image/serverpage/image-id/176082iD45C1E91BEE4F352/image-dimensions/720x223?v=v2" width="720" height="223" role="button" title="p_verkooijen_0-1735311358581.png" alt="p_verkooijen_0-1735311358581.png" /&gt;&lt;/span&gt;&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;</description>
      <pubDate>Fri, 27 Dec 2024 15:04:06 GMT</pubDate>
      <guid>https://community.qlik.com/t5/Official-Support-Articles/Qlik-Sense-Enterprise-on-Windows-Repository-error-Fatal/tac-p/2499458#M15179</guid>
      <dc:creator>p_verkooijen</dc:creator>
      <dc:date>2024-12-27T15:04:06Z</dc:date>
    </item>
  </channel>
</rss>

