topic Re: Installing Server Certificates without Private Keys in Qlik NPrinting

Installing Server Certificates without Private Keys

deec — Wed, 25 Sep 2019 19:36:43 GMT

I work in a large enterprise environment.

My web team provides a .cer file. I have been able to use these on Qlikview Servers by adding them to IIS without issue. However, it looks like the NPrinting certificate installation instructions require a .crt and a related .key file.

I tried adding the .cer file provided by changing its extension to .crt. Then following the instructions to save it to the appropriate directory and un-commenting the related line in the app.conf file. However this resulted in the server failing to respond at https...server:4994

https://help.qlik.com/en-US/nprinting/September2018/Content/NPrinting/DeployingQVNprinting/Installing-ssl-certificates.htm

My question is whether I should be able to get this to work using the .cer provided. Without a related private key file (.key)

If not, and a .crt and .key file are really the only way to do this, my web team suggested we use OpenSSL to make a .key out of our .cer
That will be the next thing we try unless someone has a better solution

Re: Installing Server Certificates without Private Keys

Frank_S — Thu, 07 Feb 2019 19:37:59 GMT

Please check the following as you must use a .cer and .key to properly secure your NPrinting server URL.

https://help.qlik.com/en-US/nprinting/September2018/Content/NPrinting/DeployingQVNprinting/Managing-cert.htm

Hope this helps.

Re: Installing Server Certificates without Private Keys

michalikj — Fri, 08 Feb 2019 10:19:24 GMT

I'd start with just opening the file in a text editor. If you have sections like:

-----BEGIN CERTIFICATE-----
<stuff>
-----END CERTIFICATE-----
-----BEGIN RSA PRIVATE KEY-----
<stuff>
-----END RSA PRIVATE KEY-----

then you don't even need to faff with openssl, just put first section in .crt file and the second in .key file