How to set a different Session Algorithm for QVP communication in QlikView 12.80 and later

[Daniele_Purrone]

By default, QlikView 12.80 will use the AES 256 GCM encryption mode for client/server communication.

Should there be a need for using a less secure mode, that can be changed in the Settings.ini and services .config files.

Using different modes across services and clients will break communication. All services and clients will need to be aligned in the same setting.

Environment

• QlikView  May 2023 (12.80) IR or higher

Resolution

1. Stop all QlikView Services
   
   
2. For your QlikView Server, QlikView Desktop and Plugin:
   
   
   1. Open the relevant settings.ini (see How to Modify the QlikView Server Settings.ini file for details)
   2. Add the setting SessionAlgorithm=mode
      
      

      The mode setting is not global. Each user must make this setting for QlikView Desktop.

3. For your WebServers, the Management Console, and Distribution Service:
   
   
   1. Open and edit the following .config files:
      
      
      • C:\Program Files\QlikView\Server\Web Server\QVWebServer.exe.config
      • C:\Program Files\QlikView\Server\QlikViewClients\QlikViewAjax\Web.config
      • C:\Program Files\QlikView\Management Service\QVManagementService.exe.config
        
      • C:\Program Files\QlikView\Distribution Service\QVDistributionService.exe.config
        
        
   2. Add or modify the following key: 
      
      <add key="SessionAlgorithm" value="mode"></add> 
      
      
4. Restart all the QlikView Services starting with the QlikView Management Service.

Possible options for mode are:

• CALG_AES_256_GCM (Default setting)
• CALG_AES_128    (AES 128 CBC algorithm)
• CALG_RC4

[rva]

Do I need to add this entry in  

C:\Windows\System32\config\systemprofile\AppData\Roaming\QlikTech\QlikViewBatch\settings.ini

to allow for Publisher to distribute to the QVS?

Thx,

Roland

[Sonja_Bauernfeind]

Hello @rva 

You will not have to modify this entry for distributing to the QVS.

All the best,
Sonja 

[rva]

when I follow your instructions, the distribute to QVS fails.

We had to add the key to 

C:\Program Files\QlikView\Distribution Service\QVDistributionService.exe.config 

as well! Then it worked. 

We see a slowdown of all distribution tasks since updating to QV12.80SR1. We hope that Distributiontasks execute faster if we set back to CALG_AES_128  !

Thx,

Roland