Disabling Kerberos encryption method RC4_HMAC_MD5 causes QlikView Server to disconnect

[Sonja_Bauernfeind]

A Windows Group Policy might disable the use of the RC4_HMAC_MD5 encryption method.

In effect, the QlikView Server will show as disconnected in the Management console. Publishing / Distributing files to it will fail. And any attempt to open documents using qvp:\servername will also disconnect. 
 
Review the local machines' Local Security Policy. 

1. Open the Local Security Policy Panel
2. Switch to Security Options
3. Locate: Network security: Configure encryption types allowed for Kerberos 
4. Is it disabled? See Fig 1.
   
   Fig 1

Resolution

1. During the disabling of this method, an additional configuration step is required on the Microsoft OS. See Windows Configurations for Kerberos Supported Encryption Type | learn.microsoft.com  for details and instructions.
   
   
2. Next, the AES 128 bit encryption needs to be enabled on:
   • the Service Account running QlikView
   • the Service Account(s) running the NPrinting Server/Engine(s) (if NPrinting Server is in use)
     
     NOTE: The NPrinting Service Account user must be different that the QlikView Service Account. See Dedicated NPrinting Server & Engine Service Account
     
     
     

Kerberos encryption method RC4_HMAC_MD5 can be disabled in QlikView version May 2022  (12.70).

 

Related articles

Disable RC4 stream cipher in QlikView May 2022 (12.70) SR1 or higher

Internal Investigation ID:

QV-22276

[upasana_s]

HI Sonja ,

Does this mean we should have this  RC4_HMAC_MD5 enabled on server  mandatory ?

We are trying to migrate to 2019 server from 2012 and on 2019 we are not able to apply license after installing Qlikview  because QVS is always showing as down even if its part of Administrators , QlikView Administrators , all ports are open , have access to Programdata\QlikTechfolders .

[Sonja_Bauernfeind]

Hello @upasana_s 

As per this article, it does not need to be enabled, but additional steps are required as documented in the article (if this is indeed the issue you are experiencing - there are a number of different root causes that could lead to the QVS to show as disconnected).

I would recommend testing the steps in this article and then also reviewing your log files and these articles: 

QlikView Services disconnected in QlikView Management Console: single service error, or 2 services a... 
Troubleshooting Disconnected Services in the QlikView Management Console (QMC)  

Should none of this help, please create a post about your issue including your troubleshooting steps and error information here:  QlikView Administration 

All the best,
Sonja