QSEoW not finding certificates even though these are in the certificate store....

[diagonjope]

Greetings!

We have a recurring situation with QSEoW not finding the certificates in order to establish proper connections with the Repository.  Once we follow the instructions in this link and create the new certificates,  everything goes back to normal.  However, a few weeks later the problem reappears.  This has happened 3-4 times during the last couple of months.  

The environment is a single node QSEoW running May 2021 Patch 4 on top of Windows Server 2012 R2 Standard edition (6.3.96).

Could it be that applying Windows patches via the WSUS is affecting QSE somehow?

Does anyone have any suggestion of what to do?  Any thoughts about this, @Bjorn_Wedbratt?

Please advise.

Cheers,

++José

[Maria_Halley]

hi @diagonjope

This does sound like an environmental issue. Maybe there is a policy that removes unsigned certificates? 

[diagonjope]

Hi @Maria_Halley,

Thanks for your comment. 

The thing is that all the Qlik certificates are available in the certificate store when this happens (none of them are missing).  We have to manually remove the certificates through the MMC and then re-create them to make QSEoW work again.   This issue is detected not only in the Proxy logs, but if we look into the Repository logs we will also find traces indicating that there is a problem with the certificates. 

Cheers,

++José

[Maria_Halley]

@diagonjope

It could be that the binding between the certificate and the service is lost.

Can you try to run only the bootstrap, not deleting the certificates. 

[diagonjope]

Hi @Maria_Halley ,

I will try this next time the problem happens.  BTW, can you point me to any documentation of how this binding occurs and how is it stored by the Qlik Services?

Cheers,

++José