Error message: The remote server returned an error: (403) Forbidden

Knowledge Base
#1

The remote server returned an error: (403) Forbidden

When Qalyptus try to open a Qlik Sense app, Qlik Sense can return an error message “The remote server returned an error: (403) Forbidden”.

Cause
The principal cause of this issue is that the Qlik Sense certificate used by Qalyptus is not the same as the current Qlik Sense certificate.

  • Your Qlik Sense certificates are changed and Qalyptus use old exported certificates.

  • You exported and installed certificates of a Qlik Sense Server X and you try to connect with Qalyptus to a Qlik Sense Server Y.

In some cases, you can generate new Qlik Sense certificates. If old certificates are not deleted, Qalyptus can use the old certificates, and Qlik Sense will not allow Qalyptus to connect.

Solution

  • If Qalyptus is installed on the same machine as Qlik Sense and both run with the same user, delete the old certificates and try again.
    If you don’t know the old certificates, delete all the certificates (old and current certificates) and generate new Qlik Sense certificates.
    Follow the steps described here to generate new certificates.

  • If Qalyptus is installed on the same machine as Qlik Sense and the user running Qlik Sense services is different than the user running Qalyptus,

  • If Qalyptus is installed in a separate machine, you need to export the certificates and install them in Qalyptus. This will replace the old certificates.

In all cases, you must make sure that you have only the certificates in use by Qlik Sense and that the old certificates are deleted.

Where do you find the Qlik Sense certificates:
1- In Certificates (Local Computer) > Trusted Root Certification Authorities > Certificates:
The Qlik Sense certificates are issued by HOSTNAME.domain-CA*

2- In Certificates (Local Computer) > Personal > Certificates:
The Qlik Sense certificates are issued by HOSTNAME.domain-CA*

3-In Certificates > Current User > Personal > Certificates:
The Qlik Sense certificate name is QlikClient

*HOSTNAME is the machine name of the server in question, and the domain is the domain of the server.
So, for example, QlikServer1 is the computer hostname, and the domain is xyz.com, the certificate will be issued by QlikServer1.xyz.com-CA