Qlik Sense Management Console fails to open when Virtual Proxy set to Always Anonymous: Error 400 Bad Request

[Mike_Dickson]

A virtual proxy which was configured to use Always Anonymous is not intended to be used for administration. While Qlik Sense will prompt for login when accessing the Qlik Sense Management Console (QMC), the Management Console cannot be navigated successfully.

Beginning with November 2023, access will fail with: 

An error occurred
The operation failed due to insufficient privileges

As well as: 

400
Bad Request

 

Previous version of Qlik Sense may succeed with the login but not allow navigation.

Resolution

Do not use a Virtual Proxy configured to use Always Anonymous as authentication method. Always have a Virtual Proxy ready which requires authentication. For information on how to create a new Virtual Proxy, see Qlik Sense: How to create a new Virtual Proxy.

If you have locked yourself out of the Qlik Sense Management Console by modifying the only available Virtual Proxy, change the enabled authentication method directly in the Qlik Sense QSR database. 

Manual steps to change the authentication method: 

1. Connect to the QSR using PGAdmin (see How to connect to the Qlik Sense Enterprise on Windows or Qlik NPrinting PostgreSQL database)
2. Open the VirtualProxyConfig table
3. In the row for your active Virtual Proxy, change the column AnonymousAccessMode value from 3 (Always Anonymous) to 0 (Requires Authentication)
4. Save the changes
5. Restart the database service

Cause 

A secure Qlik Sense Enterprise Management Console when anonymous access is required.

Internal Investigation ID(s) 

SHEND-1902

Environment

Qlik Sense November 2023 & Newer