Adding SSL certificate to QMC qlik sense

[Anonymous]

hi all,

       I followed all the way to install and adding ssl certificate to qmc. but no luck and setup the following setting also but don't know

how to get my hub to https.

Process I followed:

• Open the Microsoft Management Console (MMC) on the Central node, and select . File > Add/Remove Snap-in In right pane, which lists , select . Then click . Available snap-ins Certificates Add In the dialog box that appears, select . Then click Certificates snap-in Computer account Finish. In the dialog box leave selected, and click Select Computer ,  Local computer  Finish. This returns you to the dialog box. Click Add or Remove Snap-ins  Ok.
• In the box expand the list of Console Root dialog ,  Certificates (Local Computer). Right-click , and then select . This displays the . Personal All Tasks/Import Certificate Import Wizard The Local Machine has already been selected as the import location, so this option is greyed out on the first screen. Click . Next Browse to the location of the certificate containing the private key (the pfx file) and click .
• Next Enter the password that you specified above when adding the private key to the certificate. Select the following : Import options Mark this key as exportable. Include all extended properties. When prompted to select a location for the certificate, perform the following actions: Select Place all certificates in the folloiwng store.
• For , enter Certificate store Personal. Click to import the certificate. Finish

VII. Add the certificate thumbprint to the Qlik Sense Proxy server After importing the certificate, you must enter the thumbprint in the settings for the Qlik Sense Proxy server. Complete the following steps:

• Access the certificate you imported in the previous section. You can access it in the MMC by selecting Certificates (Local Computer) > Personal > Certificates. Double click on the imported certificate,
• and select the  tab. Details Scroll down and select . Then copy the Thumbprint values that appear in the bottom pane. Thumbprint Open the QMC, and select .
• Then select the Proxy server that will use the third-party certificate. Configure System > Proxies Click , and under  on the right, select . Edit Properties Security Enter the thumpprint you copied above in the  field

stalwar1‌ aadil.zyme‌kenphamvn‌

[Anonymous]

so which certificate we should import into the personal folder in certificates local computer(.crt or .pfx)

[Anonymous]

is the same certificate means .pfx or .crt file

[agigliotti]

import the certificate in pfx format as you already did in Personal->Certificates under Certifcates (Local Computer).

Does it works now?

[JustinDallas]

Where did you get your cert from?  Is it a company cert or one you made?  I had issues too, until I learned that I had to generate a CSR and send that off to the domain admins (GoDaddy) to get them to support my certificate.

[Anonymous]

it is a company certificate issued by godaddy. but i don't who generated the csr file because my client directly gave me the .crt file

[Anonymous]

yes it is wild card certificate.any prob with that?

[kenphamvn]

Did you install Private Key with your SSL certificate?

When using a third-party certificate, it is required that the certificate is trusted in Windows, and that the private key is stored with the certificate in the Windows certificate store. The certificate should be in the personal store for the user account that is used to run the Qlik Sense Proxy Service.

Regards,

An Pham

[Anonymous · Accepted solution]

thanks shraddha.g‌ for your support. i finally got it worked by using mainly following conditions

1. i used domain name certificate issued by third party ca(godaddy)

2. imported only .pfx file in to the personal folder (i haven't imported .crt file)

3. This is very important that is when you copy the thumb print text there is hidden character at the starting point.

   so after copy you need to remove by put the cursor at starting point and just press delete button it will delete special     hidden charater

4. now you can paste the text in ssl certificate in qmc

[socialgeekqv]

hi all,

could i use wildcard and domain name together? The cert is issued to a wildcard domain for e.g. *.abc.edu.au. In subject alternative name, DNS name  is showing *.abc.edu.au; qlik.abc.edu.au; abc.edu.au.

i'm having a certificate error that says mismatched address. i'm trying to access servername.abc.edu.au, which i thought the wildcard should be able to support.

please help. thanks!

[micheltds]

were you able to resolve the issue with the certificate?

I also have the same problem.