Do not input private or sensitive data. View Qlik Privacy & Cookie Policy.
Skip to main content
Announcements
March 26 at 10am ET: See how Qlik drives growth and value in ISV segment - REGISTER NOW
cancel
Showing results for 
Search instead for 
Did you mean: 
Yasmine_Alaoui
Partner - Contributor II
Partner - Contributor II

SSL certificate change didn't apply to clients machines

Hello Qlik Community,

We recently encountered an issue while updating the SSL certificate in our multi-node Qlik architecture. Here's a detailed explanation of the steps we followed and the problem we are now facing:

The client has a multi-node architecture with a central node accessible via RDP. The existing SSL certificate was expired, and we were tasked with replacing it with a new certificate that was recently purchased.

Here are the steps that we followed :

  • Launched MMC (Microsoft Management Console).
  • Added the "Certificates" snap-in for the local computer account.
  • Navigated to Certificates -> Personal and removed the expired certificate.
  • Imported the new SSL certificate into the same location.
  • Retrieved the Thumbprint of the newly imported certificate.
  • Logged into the QMC (Qlik Management Console) and navigated to Proxies -> Security.
  • Pasted the Thumbprint into the appropriate field and applied the changes.
  • Restarted all Qlik services to apply the new SSL configuration.
  • Refreshed the browser and verified that the central node connection was secure.

The Problem:

Although the SSL configuration works perfectly on the central node (RDP), the issue arises with client computers in the multi-node setup. Users accessing Qlik from their own devices are unable to establish a secure connection. It seems the SSL configuration is only applied to the central node and does not propagate to other nodes or client devices.

How can we ensure that the SSL certificate is properly applied to all nodes and client devices in the multi-node architecture? Are there additional steps required to propagate the certificate or configure the other nodes?

Thanks in advance for your help !

1 Solution

Accepted Solutions
mpc
Partner Ambassador
Partner Ambassador

Hi, 

You need to install the certificate on all nodes, and then register it for each proxy service available. 
Thus it should work fine. 

Best

From Next Decision and mpc with love

View solution in original post

1 Reply
mpc
Partner Ambassador
Partner Ambassador

Hi, 

You need to install the certificate on all nodes, and then register it for each proxy service available. 
Thus it should work fine. 

Best

From Next Decision and mpc with love