we setup the Qlik Sense Server and change the SSL Certificate. We set the SSL browser certificate thumbprint.
After restarting the server, hub and qmc responded with that certificate, also the QPS Service.
But QRS and QPS REST service respond with that certificate which was generate while installing. How can I change that?
Did you manage to solve the problem? I'm facing the same problem right now and have no clue how to solve it.
When you change the thumbprint in the QMC, you are actually only changing which certificate should be used when negotiating the TLS handshake with the end-users browser. It does not change the service certificates, since that is a different set of certificates.
Which use-case requires you to change them?
The short answer is however, you dont. Those particular certificates are created during installation and used by the services to communicate with each other in a secure manner. If you want to be part of that direct communication, and not go through the proxy, you need to use their certificates.
I may need someone to verify this, but I think most APIs can be reached through the proxy, which would mean that the thumbprint-specified brower certificate is used.
Have a look at the manual regarding how to work with the certificates to communicate with the services. This is a good place to start: http://help.qlik.com/sense/2.0/en-US/online/#../Subsystems/PlanningQlikSenseDeployments/Content/Serv...
The repository validates the service certificates automatically. Failing that, manual intervention can solve any potential issue with the certificates, including renewal.
The documentation describes how to work with the existing service certificates, not how to change them. The documentation (coupled with the dev manual http://help.qlik.com/sense/2.0/en-us/developer/) may also be of help when developing a solution where you dont have to disable the certificate validation.