Following an otherwise successful setup of a third-party certificate (such as DigiCert) to be used with the QlikView Management Console, documents using a Section Access script defined in the Management Console will fail to reload with the following error in the document log:
Browsing to the URL named in the error functions as expected and the Auth table is displayed. The Service Account has access to and is included in the Section Access table.
Resolution
Disable loopback on the QlikView server and modify the Section Access Script by adding the domain name. Disabling loopback requires the Windows Registry to be edited.
Windows Registry changes should at no point be carried out without first taking a backup and consulting with your local IT administrator.
Changes can be made either directly in the registry, or by deploying a PowerShell command. The change requires us to add a key in System\CurrentControlSet\Control\Lsa named DisableLoopbackCheck with a value of 1.