article ERR_SSL_KEY_USAGE_INCOMPATIBLE Error After Qlik Replicate Windows Patch/Upgrade in Official Support Articles

ERR_SSL_KEY_USAGE_INCOMPATIBLE Error After Qlik Replicate Windows Patch/Upgrade

Dana_Baldwin — Thu, 03 Oct 2024 05:53:17 GMT

After upgrading from Windows 10 to Windows 11, or applying certain patches to Windows Server 2016, Qlik Replicate may not load in the browser.

The following error is displayed:

ERR_SSL_KEY_USAGE_INCOMPATIBLE

Data Integration Products November 2021.11 or lower require a manual generation of SSL certificates for use. See Step 5 (options one and two) in the solution provided below.

Environment

Qlik Replicate 2022.11 (may happen with other versions)
Qlik Compose 2022.5 (may happen with other versions)
Qlik Enterprise Manager 2022.11 (may happen with other versions)
Use of the self-signed SSL certificate
Windows 11
Windows server 2016

Resolution

This issue has to do with the self-signed SSL certificate. Deleting the existing one and allowing Qlik Replicate/Compose/Enterprise Manager to regenerate them resolves the issue.

Stop the services for all affected software. Example: AttunityReplicateUIConsole, Qlik Compose or Qlik Enterprise Manager.
(This step only applies to Qlik Replicate) Rename the data folder under the SSL folder (\Program Files\Attunity\Replicate\data\ssl\data)
Delete self-signed certificates in the management console
1. Open a command prompt and enter MMC to open the console (on Windows Server, open "Manage computer certificates")
2. Click the File drop-down menu and select Add/Remove snap-in
3. Select Certificates and click Add
4. Select Computer account. Click Next, then click Finish.
5. Click OK to close the Add or Remove Snap-ins window
6. Open Certificates and navigate to Local Computer, then Personal, then Certificates
7. In the list of certificates shown, select the certificates where the "Issued To" value and the "Issued By" value equal your computer name and delete them.
8. Close the Management Console.
Next we will remove the reference to the self-signed certificate in Qlik Replicate:
1. Open a command prompt As Administrator
  
  For Qlik Replicate:
  
  Navigate to the ..\Attunity\Replicate\bin directory and then run the following command:
  
  RepUiCtl.exe certificate clean
  
  For Qlik Compose:
  Navigate to the ..\Qlik\Compose\bin directory and then run the following command:
  
  ComposeCtl.exe certificate clean
  
  For Qlik Enterprise Manager:
  Navigate to the ..\Attunity\Enterprise Manager\bin directory and then run the following command:
  
  aemctl.exe certificate clean
2. Run the command: netsh http delete sslcert ipport=0.0.0.0:443
  
  Note, that you may get a message that the command failed in the event there are no certificates bound to the port. This message can be ignored.
Add either a self-signed Certificate or a trusted and signed Organization Certificate.

Option One: Trusted and Signed Certificate. Generate an organization certificate that must be a correctly configured SSL PFX file containing both the private key and the certificate.

Option Two: Self-Signed Certificate. Generate a self-signed certificate on the server to replace the existing self-signed certificate. The provided PowerShell examples generate an SSL certificate for 10 years.

Run the following in PowerShell:

$cert = New-SelfSignedCertificate -certstorelocation cert:\localmachine\my -dnsname <FQDN> -NotAfter (Get-Date).AddYears(10)
Once the certificates have been obtained or generated, follow the instructions for the individual product section on how to import a certificate:
Start the services.
You may need to clear browser cache/cookies & etc. before you can access the web page outside of incognito mode.

Qlik Replicate will now allow you to open the user interface once again.

If users still cannot log in and are returned to the log in prompt at each attempt, see How to change the Qlik Replicate URL on a Windows host.
It is recommended to use your organization certificates

Re: ERR_SSL_KEY_USAGE_INCOMPATIBLE Error After Upgrading Qlik Replicate Test Environment to Windows 11

KellyHobson — Thu, 20 Jul 2023 13:24:17 GMT

Thanks @Dana_Baldwin ! This helped on my Windows machine where post Windows 11 upgrade I could not get my Replicate console to display.

I was seeing this message in the UI.

After following these steps, resolved the issue.

Re: ERR_SSL_KEY_USAGE_INCOMPATIBLE Error After Upgrading Qlik Replicate Test Environment to Windows 11

rickrliu — Tue, 01 Aug 2023 18:28:56 GMT

Hi @Dana_Baldwin,

I got the same error from Replicate and Compose after Windows 11 installed on my laptop (previous version is Windows 10). I followed the steps in this post; and got the ERR_SSL_KEY_USAGE_INCOMPATIBLE issue resolved. A new issue is that I cannot log in to my local Replicate and Compose running on Windows 11 (the login window keeps pupping up to ask use name and password). The same user name and password are working well in remotely logging in my team shared Replicate and Compose running on Windows 10. I also do not have any issue of using the same user name and password in logging in other applications on my laptop.

My Replicate version is 2021.11.0.266; and my Compose version is 2021.8.0.725. Could you advise if this is a known issue? Do you have a solution to the issue?

Thanks,

Rick

Re: ERR_SSL_KEY_USAGE_INCOMPATIBLE Error After Upgrading Qlik Replicate Test Environment to Windows 11

Hrishikesh — Wed, 02 Aug 2023 14:52:22 GMT

Hi @Dana_Baldwin , multiple users are affected in our company due to a recent move to Windows 11, after following the steps above, the UI is still not able to authenticate the existing users

We have a case # 00101855 created for this issue.

Can you please follow up on priority with this?

Re: ERR_SSL_KEY_USAGE_INCOMPATIBLE Error After Upgrading Qlik Replicate Test Environment to Windows 11

Sonja_Bauernfeind — Wed, 02 Aug 2023 14:59:43 GMT

Hello @Hrishikesh

Someone will be in touch with you regarding the open ticket. Please note that knowledge articles are not intended for immediate support, and a ticket was the right way to go if you require priority assistance.

All the best,
Sonja

Re: ERR_SSL_KEY_USAGE_INCOMPATIBLE Error After Upgrading Qlik Replicate Test Environment to Windows 11

Dana_Baldwin — Wed, 02 Aug 2023 16:41:52 GMT

Hi @rickrliu

I am not personally aware of this being a known issue. I think the best course if action is for you to open a support case to troubleshoot the issue.

Thanks,

Dana

Re: ERR_SSL_KEY_USAGE_INCOMPATIBLE Error After Upgrading Qlik Replicate Test Environment to Windows 11

Steve_Nguyen — Wed, 02 Aug 2023 17:02:44 GMT

@Hrishikesh

the issue with the windows popup on the login for credential, so like a windows security on loopback.

see the below article: on how to disable loopback

https://community.qlik.com/t5/Official-Support-Articles/How-to-change-the-Qlik-Replicate-URL-on-a-Windows-host/ta-p/2042112

Re: ERR_SSL_KEY_USAGE_INCOMPATIBLE Error After Upgrading Qlik Replicate Test Environment to Windows 11

NakulanR — Mon, 20 Nov 2023 00:42:10 GMT

Hi Support,

We have tried the above steps however it hasn't worked, and we are still seeing the ERR_SSL_KEY_USAGE_INCOMPATIBLE error when trying to access Replicate.

The environment where this is being done has both Qlik Replicate and Qlik Enterprise Manager installed on the same machine. Do the steps need to be carried out differently as a result?

When looking at the certificates in the Management Console, there are 2 listed, one of which we believe is the certificate for QEM. Is there any way to identify the certificate being used by Replicate?

Any feedback is greatly appreciated

Regards,

Nak

Re: ERR_SSL_KEY_USAGE_INCOMPATIBLE Error After Upgrading Qlik Replicate Test Environment to Windows 11

Dana_Baldwin — Mon, 20 Nov 2023 20:19:42 GMT

Hi @NakulanR

Please run: netsh http show sslcert ,, and check the hash to match with the cert hash in the mmc store

Re: ERR_SSL_KEY_USAGE_INCOMPATIBLE Error After Upgrading Qlik Replicate Test Environment to Windows 11

Manjunathps — Fri, 24 Nov 2023 04:58:03 GMT

Hi Team,

I'm facing similar issue with QEM Nov 2021, I'm able to browse QEM from the server where it is installed, but I' not able to browse from other servers where user access is granted.

Please help in this.

Regards,

Manjunath

Re: ERR_SSL_KEY_USAGE_INCOMPATIBLE Error After Upgrading Qlik Replicate Test Environment to Windows 11

NakulanR — Fri, 24 Nov 2023 05:41:34 GMT

Hi @Manjunathps ,

In our case, clearing the browser cache in addition to the resolution steps at the start of this article helped to resolve the issue.

Re: ERR_SSL_KEY_USAGE_INCOMPATIBLE Error After Upgrading Qlik Replicate Test Environment to Windows 11

tiewoods — Mon, 27 Nov 2023 19:57:13 GMT

Today, I had the same error appear for me. After working with my IT group and testing a few other things we have narrowed this down to my profile on the server and the Chrome browser. When I remoted into the server and tried the URL in Chrome just like I have in the past, it failed with the error in this article. I gave my IT domain admins permission to Qlik Replicate, they logged into the server used Chrome and logged into the Qlik Replicate. I tried IE (Yes it is old) but Edge is not on the server, and I was able to log into Qlik Replicate. I used Edge from my laptop over the VPN and it logged in without any error. Chrome fails on laptop. So our conclusion is, something to do with my profile on the server and the Chrome browser. I tried all the steps above and it still did not solve the problem. We are running Server 2019 and 2012.11.0.469 version of Qlik Replicate. I will be upgrading soon and IT may rebuild my profile on that server. Just wanted to share this with anyone else who may have the same error.

Re: ERR_SSL_KEY_USAGE_INCOMPATIBLE Error After Upgrading Qlik Replicate Test Environment to Windows 11

Dana_Baldwin — Mon, 27 Nov 2023 20:41:39 GMT

Hi @Manjunathps

Please open a support case for assistance.

Re: ERR_SSL_KEY_USAGE_INCOMPATIBLE Error After Qlik Replicate Windows Patch/Upgrade

beebs23 — Mon, 29 Jan 2024 22:28:33 GMT

Solution does not work for Microsoft Edge. My organization requires this browser. I'm using Qlik Replicate (2021.11.0.349). I've run through these steps several times, I've cleared all browser data, but I'm still getting the same error.

Re: ERR_SSL_KEY_USAGE_INCOMPATIBLE Error After Qlik Replicate Windows Patch/Upgrade

tiewoods — Tue, 30 Jan 2024 13:41:48 GMT

Yesterday, I had a problem with Qlik Replicate where the web interface would not load in Chrome/Edge from local server and my laptop. I could only resort to using IE as a last-ditch effort and it loaded the web interface so I could see the Qlik Replicate issue and fix it. I have opened a ticket with my IT Web team for further assistance with certificates. I will add that the security in my company has the windows updates applied every month. I can share a screenshot of the OS the server has along with a Windows Patch history if this is helpful. I do not think this is a profile issue as my IT team suggested earlier in my previous posting. Once I find more, I will update this article.

Re: ERR_SSL_KEY_USAGE_INCOMPATIBLE Error After Qlik Replicate Windows Patch/Upgrade

Dana_Baldwin — Tue, 30 Jan 2024 16:43:44 GMT

Hi @beebs23

Has your environment recently disabled NTLM authentication? If so, users will need to log in with username@domain.com rather than domain/username as the format is not supported by Kerberos.

If this is not the situation, please open a support case.

Please note, we expect that use of a signed certificate would also resolve this issue if that is an option for you.

Thanks,

Dana

Re: ERR_SSL_KEY_USAGE_INCOMPATIBLE Error After Qlik Replicate Windows Patch/Upgrade

Dana_Baldwin — Tue, 30 Jan 2024 16:45:07 GMT

Hi @tiewoods

I am assuming you already tried the steps above and it did not help.

Has your environment recently disabled NTLM authentication? If so, users will need to log in with username@domain.com rather than domain/username as the format is not supported by Kerberos.

If this is not the situation, please open a support case.

Please note, we expect that use of a signed certificate would also resolve this issue if that is an option for you.

Thanks,

Dana

Re: ERR_SSL_KEY_USAGE_INCOMPATIBLE Error After Qlik Replicate Windows Patch/Upgrade

tiewoods — Tue, 30 Jan 2024 17:20:35 GMT

@ Dana_Baldwin - Thank you for your information. I have sent this over to our IT team to have them check. I want to be clear that the log in screen does not appear and when I used IE I never even got prompted to login, it brought me right into Qlik Replicate. Thank you again. I will update this when I hear back from my IT team.

Re: ERR_SSL_KEY_USAGE_INCOMPATIBLE Error After Qlik Replicate Windows Patch/Upgrade

beebs23 — Wed, 31 Jan 2024 14:30:49 GMT

I imported a signed certificate and that resolved the issue.

Re: ERR_SSL_KEY_USAGE_INCOMPATIBLE Error After Qlik Replicate Windows Patch/Upgrade

tiewoods — Tue, 20 Feb 2024 19:16:45 GMT

We imported a new signed certificate, and the error no longer happens. Thanks to everyone for their help.

article ERR_SSL_KEY_USAGE_INCOMPATIBLE Error After Qlik Replicate Windows Patch/Upgrade in Official Support Articles

ERR_SSL_KEY_USAGE_INCOMPATIBLE Error After Qlik Replicate Windows Patch/Upgrade

Environment

Resolution

Related Content:

Re: ERR_SSL_KEY_USAGE_INCOMPATIBLE Error After Upgrading Qlik Replicate Test Environment to Windows 11

Re: ERR_SSL_KEY_USAGE_INCOMPATIBLE Error After Upgrading Qlik Replicate Test Environment to Windows 11

Re: ERR_SSL_KEY_USAGE_INCOMPATIBLE Error After Upgrading Qlik Replicate Test Environment to Windows 11

Re: ERR_SSL_KEY_USAGE_INCOMPATIBLE Error After Upgrading Qlik Replicate Test Environment to Windows 11

Re: ERR_SSL_KEY_USAGE_INCOMPATIBLE Error After Upgrading Qlik Replicate Test Environment to Windows 11

Re: ERR_SSL_KEY_USAGE_INCOMPATIBLE Error After Upgrading Qlik Replicate Test Environment to Windows 11

Re: ERR_SSL_KEY_USAGE_INCOMPATIBLE Error After Upgrading Qlik Replicate Test Environment to Windows 11

Re: ERR_SSL_KEY_USAGE_INCOMPATIBLE Error After Upgrading Qlik Replicate Test Environment to Windows 11

Re: ERR_SSL_KEY_USAGE_INCOMPATIBLE Error After Upgrading Qlik Replicate Test Environment to Windows 11

Re: ERR_SSL_KEY_USAGE_INCOMPATIBLE Error After Upgrading Qlik Replicate Test Environment to Windows 11

Re: ERR_SSL_KEY_USAGE_INCOMPATIBLE Error After Upgrading Qlik Replicate Test Environment to Windows 11

Re: ERR_SSL_KEY_USAGE_INCOMPATIBLE Error After Upgrading Qlik Replicate Test Environment to Windows 11

Re: ERR_SSL_KEY_USAGE_INCOMPATIBLE Error After Qlik Replicate Windows Patch/Upgrade

Re: ERR_SSL_KEY_USAGE_INCOMPATIBLE Error After Qlik Replicate Windows Patch/Upgrade

Re: ERR_SSL_KEY_USAGE_INCOMPATIBLE Error After Qlik Replicate Windows Patch/Upgrade

Re: ERR_SSL_KEY_USAGE_INCOMPATIBLE Error After Qlik Replicate Windows Patch/Upgrade

Re: ERR_SSL_KEY_USAGE_INCOMPATIBLE Error After Qlik Replicate Windows Patch/Upgrade

Re: ERR_SSL_KEY_USAGE_INCOMPATIBLE Error After Qlik Replicate Windows Patch/Upgrade

Re: ERR_SSL_KEY_USAGE_INCOMPATIBLE Error After Qlik Replicate Windows Patch/Upgrade