How to enable HTTPS for Qlik GeoAnalytics Server or change the currently used certificate

Bjorn_Wedbratt — Tue, 20 Apr 2021 10:13:25 GMT

It is recommended to enable HTTPS for Qlik GeoAnalytics Server. This can be done either during the installation or by editing the config.ini after the installation.

The deployed SSL certificate may need to be updated regularly, which requires a repeat of the initial installation steps.

Environment:

Resolution:

Before you begin

Make sure you have a certificate in PKCS12 (.pfx, p12) format, including the private key! This can be exported out from Windows Certificate Manager, Qlik Sense Management Console (if using self-signed certificates generated by Qlik Sense) or acquired by your certificate authority
Make sure the certificate matches the hostname where Qlik GeoAnalytics Server is installed, (example: myserver.domain.local )
Place the certificate where it can be accessed by Qlik GeoAnalytics Server

Set / Change certificate during install

The recommended way to enable HTTPS is to run the installation package and set/change the certificate during install. Setting the certificate during install will automatically obfuscate the password stored in config.ini.

Launch the Installer
On the second step of Server Settings (Basic) enable HTTPS and browse to the desired certificate. See fig 1.

Fig 1
Proceed with the installation.

Alternative way to enable HTTPS on an already installed Qlik GeoAnalytics Server

Edit config.ini found in %ProgramData%\Qlik GeoAnalytics Server and add the following to the [SSL] section, replacing details to match your environment:
[SSL] sslEnabled=true sslPort=443 sslKeystore=c:\\path_to_certificate\\certificate_filename.pfx sslPassword=certificate_password
While encryption of passwords is required in later versions, it should still be possible to use clear text password in the ini. However, it's recommended to re-run the installation program to set the parameters and then the password will be obfuscated like enc:0B0115327474.

All obfuscated passwords should start with enc:
Open Qlik GeoAnalytics Configure Service console and restart the service
Verify HTTPS working properly.
Any errors/warnings about the certificate not being valid, such as missing Subject Alternative Name, issues with the certificate chain etc may result in errors when using the server and needs to be investigated and fixed.

Re: How to enable HTTPS for Qlik GeoAnalytics Server or change the currently used certificate

MMCGLAESASAA — Mon, 13 Jan 2025 14:44:12 GMT

Please suggest the steps to ENCRYPT the PFX Password as well to put it in the "config.ini" file.