Skip to main content
Announcements
Qlik Introduces a New Era of Visualization! READ ALL ABOUT IT
cancel
Showing results for 
Search instead for 
Did you mean: 
Anonymous
Not applicable

Installing SSL certificate on Sense server

Hi all,

Yesterday I attempted to install a real, signed certificate on our Sense server as detailed here:

https://help.qlik.com/sense/en-US/online/Subsystems/Qlik_Management_Console_help/Content/ServerUserG...

Unfortunately, after that was done, I couldn't get in via either SSL or regular HTTP. When I attempted to get in via SSL I would get a server not responding error, and when attempting via HTTP I was asked for my credentials three times before being presented with a blank white screen. This was when connecting to either hub or qmc.

I'm not looking for how to get in and fix it - We're just going to restore from backup and start over. I just want to know how to do it right!

Do I need to remove the spaces from the thumbprint when I paste it into the QMC? Anything else that might not be obvious to someone (me) who isn't really much of a Windows admin?

Thanks!

27 Replies
Marc
Employee
Employee

Two possible reasons for this...

1. incorrect certificate type... make sure it has a Purpose of "Server Authentication" and Key Usage of "Digital Signature & Key Enciphement"

2. Make sure that the Service Account being used for the Qlik Services has permissions to access the Private Key.
How to Modify Private Key Permissions to Support Management Server or Streaming Server | Microsoft D...

rkspareek1992
Partner - Creator
Partner - Creator

I have installed SSL certificate in my Qliksense server as per the process, but URL is still showing red colour.

Kindly suggest how to troubleshoot.

korsikov
Partner - Specialist III
Partner - Specialist III

you probably installed a self-signed certificate or a certificate that you do not trust.

Marc
Employee
Employee

1. The Certificate or one of the Certificates in its Issuing Chain has to be in the Trusted Root on the Computer you are using. (Public certificate Authorities such as DigiCert, Comodo etc are already in the Trusted Root by default) If you are using a Internal CA for the SSL Cert then it will need to be trusted by your end users

2. The Certificate needs to have a "Subject Name" or "Subject Alternative Name" (SAN) that matches the server/Domain Component of the URL you are using to access the server. e.g SAN of dns=server.domain.com

3. The Certificate & Private Key need to be installed in the Servers Personal (\My) Certificate Store

4. The Service account Running the Qlik Sense Proxy Service Needs to have Permissions on the Private Key to read it.

5. The thumbprint of the certificate needs to be added to the proxy.

(having a valid Certificate and then using https://localhost will show not secure)

rkspareek1992
Partner - Creator
Partner - Creator

Sorry for Inconvenience.. the IT person didn't installed SSL in server properly.

I re-installed SSL certificate in the server then copied thumbprint to Qlik proxy setting & its working...

Thanks for your time...

gianpaolo_31
Contributor III
Contributor III

Hello Rakesh,

Can you share the steps on how you did it? How and from did you get SSL cert.

Thanks,

rkspareek1992
Partner - Creator
Partner - Creator

Hi Gian,

The below-mentioned link consists of step by step process of installing SSL certificate in Qlik sense server. Please make sure that you didn't miss any step.

https://support.aginic.com/support/solutions/articles/14000031148-applying-an-ssl-certificate-to-qli...

Local IT team provided the SSL certificate to me.

Ping me if you have any doubts regarding this.

ger_alegria
Partner - Creator
Partner - Creator

How did you roll back?