Qlik will not take responsibility for any security breach within your environment.
How do I do upgrade?
Please see Patching Qlik Sense on the Help site for specific steps. It’s important to note the additional steps for recreating the certificates due to the Node.js vulnerability. Please use the following materials for more guidance on recreating the certificates:
Why do I need to recreate the Qlik Sense certificates?
For the new version of Node.js to be compatible with Qlik Sense, the Qlik Sense certificates need to be recreated.
What version(s) should I apply if I am looking to upgrade to a more recent version?
We recommend upgrading to the latest version. However, we know that is not always possible. Regardless of the track you upgrade to, you will first need to apply the Initial Release (IR) then apply the latest patch for that track. Example: If you’re currently on June 2019 Patch 10 and would like to upgrade to the November 2019 track, you will need to apply November 2019 IR first then apply November 2019 Patch 6.
I have recreated my certificates. Do I need to update the certificates anywhere else?
You will also have to replace Qlik Sense root certificate with the newly created one in the following cases:
Your Qlik Sense deployment is connected with Qlik NPrinting, Qlik multi-cloud setups, or any other external tools or configurations.
You have configured QlikView Distribution Service for distribution of links to QlikView documents to the Qlik Sense hub.
If I upgrade to February 2020, do I need to recreate the certificates?
No, you do not have to recreate the certificates. The February 2020 installer will recreate the certificates for you. Verify the certificates were created successfully by using the C2 Validator tool.