QlikView 12.80: set a different Session Algorithm for QVP communication

[Daniele_Purrone]

By default, QlikView 12.80 will use the AES 256 GCM encryption mode for client/server communication.

Should there be a need for using a less secure mode, that can be changed in the Settings.ini and services .config files.

Please note: using different modes across services and clients will break communication. All services and clients will need to be aligned in the same setting.

Environment

• QlikView  May 2023 (12.80) IR or higher

1. Stop all QlikView Services
2. For the QlikView Server, QlikView Desktop and Plugin, edit the settings.ini file and add SessionAlgorithm=mode
3. for the WebServers and the Management Console, edit the following files
   • C:\Program Files\QlikView\Server\Web Server\QVWebServer.exe.config
   • C:\Program Files\QlikView\Server\QlikViewClients\QlikViewAjax\Web.config
   • C:\Program Files\QlikView\Management Service\QVManagementService.exe.config
     
     by setting
     
     <add key="SessionAlgorithm" value="mode"></add> 

Possible options for mode:

CALG_AES_256_GCM (Default setting)   

CALG_AES_128    (AES 128 CBC algorithm)

CALG_RC4

Once done, restart all the QlikView Services starting with the QlikView Management Service

[rva]

Do I need to add this entry in  

C:\Windows\System32\config\systemprofile\AppData\Roaming\QlikTech\QlikViewBatch\settings.ini

to allow for Publisher to distribute to the QVS?

Thx,

Roland

[Sonja_Bauernfeind]

Hello @rva 

You will not have to modify this entry for distributing to the QVS.

All the best,
Sonja 

[rva]

when I follow your instructions, the distribute to QVS fails.

We had to add the key to 

C:\Program Files\QlikView\Distribution Service\QVDistributionService.exe.config 

as well! Then it worked. 

We see a slowdown of all distribution tasks since updating to QV12.80SR1. We hope that Distributiontasks execute faster if we set back to CALG_AES_128  !

Thx,

Roland