Unlock a world of possibilities! Login now and discover the exclusive benefits awaiting you.
When a user is deleted, any spaces, apps, scripts, and data connections they own will remain in the tenant without an owner. To prevent orphaned records, reassign ownership of these assets before deleting the user. Source: Reassigning ownership of spaces and resources (Qlik Cloud Documentation)
But even if the app is considered an Orphaned App, the owner can be changed in the Qlik Cloud Analytics Administration Console:
After an upgrade to QlikView September 2025 SR1, tasks defined in the QlikView Management Console using an external program fail.
The QlikView server's Windows Event log shows the following error:
Faulting application name: Qv.exe, version: 12.100.20100.0, time stamp: 0x692464ea
Faulting module name: ntdll.dll, version: 10.0.20348.4893, time stamp: 0xfd32fdb3
Exception code: 0xc0000005
Affected versions:
This is a known QV.exe defect (QCB-34453). Upgrade to QlikView September 2025 SR 2 or later releases.
Information provided on this defect is given as is at the time of documenting. For up-to-date information, please review the most recent Release Notes or contact support with the ID QCB-34453 for reference.
Product Defect ID: QCB-34453
By Giacomo Brioschi, Principal Solution Architect, Qlik | Sathisan Vannadil, Senior Partner Solutions Architect, AWS | Sunil Yerkola, Senior Solutions Architect, ISV, AWS.
This guide walks you through the complete setup to bridge Amazon Quick and the Qlik MCP server, enabling real-time access to trusted Data Products with Qlik Trust Score for governed, AI-ready data, and insights and context from the Qlik Analytics Engine, all from within Amazon Quick.
Content
A Qlik tenant administrator must create (or update) a custom user role that grants the Qlik MCP permission. Without this, users will authenticate successfully but won't be able to execute any MCP tools.
This can also be done from the Permissions tab. Use the Auto assign drop-down to give permission to all users in your tenant.
Space permissions and Section Access rules still apply. The MCP role grants access to the MCP server itself, but what each user can see and do through MCP is governed by their existing Qlik Cloud permissions. See Qlik MCP server access and permissions for details.
The OAuth client authenticates and scopes user access when Quick connects to the Qlik MCP server. A tenant administrator must create an OAuth client for the integration. Once the OAuth client is ready, you can add the Qlik MCP server as a connection in Quick.
Alternatively, you can use OAuth Dynamic Client Registration (DCR), which allows an LLM client to register itself automatically with Qlik Cloud, without the tenant administrator needing to create an OAuth client in advance.
For more information, see how to connect to the Qlik MCP server and how to create OAuth clients for LLM clients in our online help.
Amazon Quick supports two OAuth client types for User authentication: Web (server-side, browser-based redirect flow) and Native (client-side, PKCE-based flow without a backend secret). Choose the one that best fits your security requirements and use case. The following section describes the Web configuration as an example.
Important, tenant admin must connect first: according to Qlik documentation, the tenant administrator has to be the first user to connect and authenticate with any new MCP client. This establishes tenant level trust between Quick and the Qlik OAuth app. Until the admin completes this first connection, other users' connection attempts will fail. Make sure the admin completes the Quick side integration (Step 4) and authenticates before rolling out access to other users.
This step is performed in Amazon Quick, not in Qlik Cloud.
In this final configuration step, you will create an Amazon Quick connection to the Qlik MCP server to access your trusted data foundation. Once this is completed, you will be able to use your Amazon Quick Chat Agents to invoke the available tools to retrieve insights from Qlik. Instructions for adding a remote MCP server connection in Quick will depend on the Quick integration UI.
At a high level:
Data sharing notice: by clicking Approve, you enable the Qlik MCP server to share your Qlik Cloud data with Amazon Quick. Quick is not managed by Qlik, and your data will be stored and processed under AWS's control. Check your organisation's AI data sharing policies before proceeding.
With the connector in place, the tools that the Qlik MCP server provides are now available within Amazon Quick. Chat Agents in Amazon Quick help users explore data, analyse information, and take actions through open-ended natural language conversations, now including Qlik's capabilities. Agents are configured with specific goals, knowledge sources, and connected tools, and can evolve from simple question answering to orchestrating complex workflows. You can use chat agents to:
For more information, see Create, customize, and deploy AI-powered chat agents in Amazon Quick | docs.aws.
Let's explore together how to create an Agent in Amazon Quick that uses the Qlik MCP server connection.
Now you're ready to harness the full power of Qlik's trusted Data Products and Analytics Engine within Amazon Quick workflows through the newly created agent. What once required switching between tools can now happen in a single, unified experience.
Problem: Non-admin users can't connect
Likely root cause: Tenant admin hasn't completed first connection yet (see note in Step 3)
Problem: OAuth callback fails
Likely root cause: Region placeholder in the redirect URL doesn't match your Quick instance's actual region
Problem: User connects but can't access specific apps or data
Likely root cause: Space permissions or Section Access rules are restricting access; this is by design
Problem: The user is not able to use Qlik tools from the Amazon Quick Chat Agent
Likely root cause: Make sure the Qlik MCP server connection is added to the Chat Agent's available actions
The Model Context Protocol (MCP) is an open standard that lets AI assistants connect to external data sources and tools.
Connecting Perplexity to the Qlik MCP server means you can get Perplexity’s real-time web search and reasoning alongside Qlik’s governed analytics data in a single conversation, or have it take action to manage operations within your Qlik Cloud tenant.
A short orientation before touching any settings:
See Qlik MCP server for details.
Before creating the OAuth client in Qlik Cloud, decide which client type fits your situation. For connecting Perplexity, the relevant choice is between Web and Native.
A Web client issues a client secret in addition to a client ID. The secret is stored server-side on Perplexity and is never exposed to the browser or end user. This makes it the more secure option: even if someone obtains the client ID, they cannot complete the OAuth flow without the secret.
Use a Web client when:
Copy the client secret at creation time. Qlik will not show it again. For a Web client, you will paste it into Perplexity during connector configuration.
A Native client does not use a client secret. It relies on the OAuth PKCE flow, which protects against code interception without requiring a shared secret. This is a valid and commonly used pattern for public clients.
Use a Native client when:
|
|
Web client |
Native client |
|
Client secret |
Yes, stored server-side on Perplexity |
No |
|
Setup complexity |
Slightly higher |
Minimal |
|
PKCE |
Optional |
Required |
Both client types work with Perplexity’s custom remote connector flow.
The tenant administrator creates the OAuth client:
See Deploying Qlik MCP server for a tenant for details.
By clicking Approve, you are authorising the Qlik server to share your Qlik Cloud data with Perplexity, a third-party system not managed by Qlik. Check your organisation's AI data-sharing policies before proceeding.
If the Qlik MCP server supports OAuth discovery (via /.well-known/oauth-authorization-server), Perplexity can detect endpoints and scopes automatically, and you may not need to enter them manually.
Toggle the connector on under Sources in a Perplexity thread. You can also type the connector name, and it’ll suggest adding it to the thread.
Try these example prompts to confirm the connection is working:
Organisation members can add custom remote connectors if admins have enabled them. Only admins can share a connector with the entire organisation, done from the Permissions screen in Enterprise settings.
According to the Qlik Cloud Platform document, Qlik leverages our cloud providers for backups to maintain copies of content for 30 days.
Can I restore one of those backups?
No, those backups cannot be restored. They are kept for disaster recovery purposes (see Disaster recovery/backup and recovery) and encompass entire regions.
It's therefore not possible to recover a tenant's previous stage.
It's the tenant admin's responsibility to make sure that copies of the content are regularly backed up on any platform of choice for easy restoration. See Qlik Cloud Administration: Backup Responsibilities for details.
Qlik Cloud includes robust disaster recovery and backup mechanisms for active tenant data. See Adaptive high-availability infrastructure for details.
However, this does not mean data that has been deleted by the customer is being retained. Intentionally or accidentally deleted Qlik Cloud data may not be recoverable by Qlik. See Qlik Cloud Analytics: Is it Possible to Recover a Deleted App or Sheet?
To prevent data loss, customers are responsible for implementing their own backup strategy for any content that may be removed. This includes apps, sheets, and spaces within the Qlik Cloud environment.
How to Back Up Qlik Cloud Apps
There are several ways to back up Qlik Cloud content:
Qlik Automate supports the creation of workflows that regularly back up apps within Qlik Cloud. These workflows can, for example, be configured to export apps to external storage, synchronize content between spaces, or integrate with version control systems.
Here are some helpful resources to get started:
These automations can be tailored to meet organizational backup requirements and integrated into broader content management strategies.
Qlik CLI enables app exports using command-line tools.
For more information regarding Qlik CLI, please see this introduction on the Qlik Developer Portal.
With Qlik CLI installed, the “qlik app export <appId> [flags]” command can be used to export an app. More information about the command and its available flags can be found on its Qlik Developer Portal page.
The public Qlik REST APIs can be used to build a more customized, local solution.
Using the POST /api/v1/apps/{appId}/export endpoint returns a "Location" header with the download URL for the exported app.
External tools that integrate with Qlik Cloud can also be used to back up apps. Please note that third-party solutions are not supported by Qlik Support.
A Qlik Sense app has been deleted from the Qlik Sense Management Console and needs to be restored.
! Deleting Qlik Sense application from Qlik Management Console (QMC) is generally an irreversible process. Restoring the applications is only possible if a previous backup exists. The delete process removes all files from the configured file share. See Creating a file share (Help.com).
If a backup of the files exists, proceed with the documented steps.
Note that these steps can also be applied when restoring and importing from one Qlik Sense environment to the other.
Information on server migration has also be posted to Qlik Community: Qlik Sense Migration Part1: Migrating your Entire Qlik Sense Environment. If assistance is needed, Qlik Consulting would need to be engaged. Qlik Support cannot provide walk-through assistance with server migrations outside of a post-installation and migration completion break/fix scenario.
To successfully restore Qlik Sense Application to the Qlik Sense environment, you must ensure backup strategy using your backup software tool for your shared folder, where Qlik Sense Application files are stored.
! If no backups of files are available, no restoration will be possible.
You can find the filename (APP_ID) in the AuditActivity_Engine log.
This log is by default stored in: \\<rootShare>\Log\Engine\Audit\ by default.
An example showing App id followed by App name follows:
492 20.4.2.0 20180521T180500.118+0200 QlikServer1 0ccd5e9f-e020-4b76-a84d-144bdf903765 20180521T180500.112+0200 12.145.3.0 Command=Reload app;Result=0;ResultText=Success 0 0 2290 INTERNAL sa_scheduler d296b870-da06-4311-bacc-038992b1c954 c047d8a7-148c-4ea6-97f2-10290e706cd7 License Monitor Engine Not available Doc::DoReloadEx Reload app 0 Success 0ccd5e9f-e020-4b76-a84d-144bdf903765
This will make the file readable and importable.
You can now locate the app in the shared folder with a new App ID.
Click Publish
The Publishing dialogue:
Qlik Cloud automatically places applications on compute engines based on calculated metrics that determine the required resources. This automatic placement works well for most apps, but some require manual intervention.
Apps with large chart objects that generate large hypercubes can consume all available memory and crash. By pinning an app to a specific engine size, you control the minimum compute resources available for interactive consumption.
For details, see Assigning engines to improve application performance and Pin applications to engine sizes.
This article aims to clarify how reloads are handled for an app pinned to an engine, since assigning an engine concerns only the opening and consumption of apps by end users, not app reloads.
How reloads are handled:
Erlang/Open Telecom Platform (OTP) has disclosed a critical security vulnerability: CVE-2025-32433.
Is Qlik NPrinting affected by CVE-2025-32433?
Qlik NPrinting installs Erlang OTP as part of the RabbitMQ installation, which is essential to the correct functioning of the Qlik NPrinting services.
RabbitMQ does not use SSH, meaning the workaround documented in Unauthenticated Remote Code Execution in Erlang/OTP SSH is already applied. Consequently, Qlik NPrinting remains unaffected by CVE-2025-32433.
All future Qlik NPrinting versions from the 20th of May 2025 and onwards will include patched versions of OTP and fully address this vulnerability.
There are two different ways to check the patch version of your Qlik Talend JobServer:
On the server that JobServer is installed, navigate to <JobServer>/agent
If the version of Talend JobServer is TPS-6002 (R2025-04) or higher, the patch level for JobServer can be found in the branding.properties file.
Qlik Software Windows executables (such as Qlik Talend Studio, Talend Installers, Qlik NPrinting) come with an embedded digital signature, which signals Windows (and any security software) that the executable has been verified.
The digital signature is typically valid for 2 to 3 years before requiring renewal.
However, when reviewing the signature, it may show that it was revoked by the issuer around April 28th of 2026, even though it should still be valid for another 6-12 months.
Consequently, security software may block any executable that does not have a valid or current digital signature, leading to users being unable to launch the installed Qlik software.
While proceeding by bypassing the signature check is an option, it is not always a feasible workaround. Qlik is actively replacing the affected installation files with executables that include both the digital signature and a new (valid) countersignature.
Re-downloading the installation package from the Qlik Download page will resolve the issue in most instances.
Not all files have been replaced at this point. Specifically, major releases (IR) are still undergoing processing.
To prevent this from recurring, Qlik has updated its digital signing processes.
If your product is not available on the Qlik Download page (such as Qlik Talend Studio), contact Qlik Support to receive the newly compiled executable (R2024-05 through R2026-05).
The revocation of the digital signature was due to identifying a countersignature that did not have a timestamp set.
ITSYS-16864
After an admin invited a user to a Qlik Cloud tenant, the user never received the invitation email.
How can this be resolved quickly?
There are several possible reasons for a user not to receive their expected invite email, such as temporary glitches with the recipient's mail server, a spam filter capturing the invite, or even a simple accidental deletion of the invite.
However, an invited user does not actually need the invitation email to access the tenant. They can log in to the tenant after the invite was sent, regardless of whether or not they received the email.
To get a user you previously invited into your Qlik Cloud tenant:
After upgrading to Microsoft Windows Server 2025, the installed Qlik Sense Enterprise on Windows patch version is no longer visible in the Installed Updates summary.
In previous Windows Server versions, navigating to Control Panel > Programs and Features > Installed Updates displayed the patch version.
Changes in Windows Server 2025 affect how installed updates are displayed in the Control Panel. This does not indicate a failed installation.
You can verify what patch version of Qlik Sense Enterprise on Windows you have installed by retrieving it from the Windows registry. Alternatively, see What version of Qlik Sense Enterprise on Windows am I running?
The registry key including the patch version is:
Computer\HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\QlikSenseEnterprisePatch
You can query the registry using PowerShell.
Administrator privileges are required to access the Registry or to run the recommended PowerShell script.
We recommend using the attached Get-QlikSensePatchInfo.ps1 script.
Example output:
DisplayName : Qlik Sense May 2025 Patch 17
DisplayVersion : 14.231.29
UninstallString : "C:\ProgramData\Package Cache\c70a85bf-ecb8-4772-affb-80f28a97bdcb\Qlik_Sense_update.exe"
Get-ItemProperty "HKLM:\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\QlikSenseEnterprisePatch" | Select-Object DisplayName, DisplayVersion, UninstallString
Qlik Sense Connectors are missing from the Data source except few REST connectors.
Repair Qlik Sense with the Qlik Sense Setup file (identical version).
Encryption keys:
Encryption keys will be stored in either "C:\Users\{sense service user}\AppData\Roaming\Qlik\QwcKeys\" Or "C:\Users\{sense service user}\AppData\Roaming\Qlik\Keys\"
An error occurred / Failed to load connection error message in Qlik Sense - Server Has No Internet
Changes must be made to all Qlik servers that will not be provided with internet access.
For servers not connected to the internet, they may be prompted with a pop-up error when browsing in the Hub or in the Data Load Editor with the following errors:
Only deploy of the listed options.
Option 1 will persist through upgrades, whereas Option 2 would have to be reapplied after every Qlik Sense Enterprise on Windows upgrade.
<runtime>
<generatePublisherEvidence enabled="false"/>
</runtime>
<runtime> <generatePublisherEvidence enabled="false"/> </runtime>
<runtime> <some other key="value"/> <generatePublisherEvidence enabled="false"/> </runtime>Example:
<runtime>
<generatePublisherEvidence enabled="false"/>
</runtime><runtime>
<generatePublisherEvidence enabled="false"/>
</runtime><runtime>
<some other key="value"/>
<generatePublisherEvidence enabled="false"/>
</runtime>In a Windows multi-node deployment, the App Distribution Service (ADS) distributes apps from Qlik Sense Enterprise on Windows to Qlik Sense Enterprise SaaS. The service is installed on every node. However, Qlik Sense does not have load balancing for ADS, meaning if not all nodes have access to the apps, distribution may fail. See App Distribution from Qlik Sense Enterprise to Qlik Cloud fails when distributed from RIM NODE.
If you wish to disable app distribution from certain nodes:
[appdistributionservice]
Disabled=true
Identity=Qlik.app-distribution-service
DisplayName=App Distribution Service
ExePath=dotnet\dotnet.exe
UseScript=false
[hybriddeploymentservice]
Disabled=true
Identity=Qlik.hybrid-deployment-service
DisplayName=Hybrid Deployment Service
ExePath=dotnet\dotnet.exe
UseScript=false
After updating the license, connecting to the Talend Administration Center fails with:
You are using # DI users, but your license allows only #, please contact your account manager.
Two solutions exist.
License downgrade behavior: When downgrading licenses (for example, from DQ seats to DI seats), user configurations must also be updated.
- Users previously assigned as DQ must be manually changed to DI
- Failure to update the user type may cause access issues or license mismatches
The issue occurs due to a mismatch between the number or type of users defined in the system and those allowed by the updated license.
In Qlik Talend Administration Center, users are assigned different license seat types depending on their access rights and functional domain.
The main user/license types are:
For more information regarding license types and features for users, see What domains can you work in depending on your user type and license.