Unlock a world of possibilities! Login now and discover the exclusive benefits awaiting you.
Hi,
I have just successfully installed an SSL on a QlikSense server which was quite straightforward.
We have a wildcard SSL - so I wish to install the same Cert on a separate QlikvView Server. I have copied it across and installed in via the MMC.
As well as selected port 443 and ticking HTTPS in QMC - what else do I have to do to ensure it works?
Many thans,
Phil
Hey Phil,
Hi,
Thanks for the reply!
I've done as you have suggested and my powershell output is
SSL Certificate bindings:
-------------------------
IP:port : 0.0.0.0:443
Certificate Hash : fdxxxxxxxxxxxxxxxxxxxxx0
Application ID : {4fxxxxxxx-fxxxxxxxx1-xxx1-7bxxxxxxxxxxx43}
Certificate Store Name : (null)
Verify Client Certificate Revocation : Enabled
Verify Revocation Using Cached Client Certificate Only : Disabled
Usage Check : Enabled
Revocation Freshness Time : 0
URL Retrieval Timeout : 0
Ctl Identifier : (null)
Ctl Store Name : (null)
DS Mapper Usage : Disabled
I have also checked port 443 / Https in QMC and restarted the services.
I have also checked that the inbound rule for port 443 is open on the firewall.
When i then try https://myip , I get :
This site can’t be reached
The connection was reset.
Try:
Did you try https://yourAddress/Qlikview
I don't think Qlikview server will automatically redirect you to the access point so you have to be specific.
Hello Phil,
@chriscammers has been spot on so far in all the instructions given to you, and it sounds like you followed them correctly. His suggestion on the URL is also spot on. It needs to be the full path to the AccessPoint, including the /qlikview path in the URL.
You can cross check against one of our articles around that, which also includes a hint on how to check the logs afterwards to verify if the QlikView webserver has bound itself correctly to port 443. See here (000002484) for details.
/Sonja
Hi @Sonja_Bauernfeind ,
Thanks for your suggestions...
Here is the most recent lof entry :
20190322T135529.579+0000 Information Configured directories
20190322T135529.580+0000 Information Load Settings from: C:\ProgramData\QlikTech\WebServer\config.xml
20190322T135529.637+0000 Information register prefix: "https://+:443/qvajaxzfc/"
20190322T135529.638+0000 Information register prefix: "https://+:443/scripts/"
20190322T135529.638+0000 Information register prefix: "https://+:443/qlikview/"
20190322T135529.638+0000 Information register prefix: "https://+:443/qvdesktop/"
20190322T135529.638+0000 Information register prefix: "https://+:443/qvplugin/"
20190322T135529.639+0000 Information register prefix: "https://+:443/"
20190322T135529.654+0000 Information Start normally.
20190322T135529.662+0000 Information Connect to server: myserver
20190322T135529.799+0000 Information Success Connect to: myserver
20190322T135529.802+0000 Information Sending to 'myserver:4747': <Global method="QvVersion"></Global>
20190322T135529.805+0000 Information Received from 'myserver:4747': <Global><_retval_>12.30.20000.0</_retval_></Global>
20190322T135529.808+0000 Information Attempting to start QVWS soap server at port 4750...
20190322T135529.850+0000 Information Service host started.
20190322T135543.603+0000 Information Load Settings from: C:\ProgramData\QlikTech\WebServer\config.xml
20190322T135614.053+0000 Information Load Settings from: C:\ProgramData\QlikTech\WebServer\config.xml
Does it matter that we have a wildcard SLL *.mydomain.com ?
I'm still getting a This Site Can't be Reached Error.... even when trying https://myserver.com/qlikview
This means that the server is listening on port 443, it won't specify what URL it is available on, or what URL the certificate is for.
Have you tried accessing https://localhost/qlikview (typed exactly like this) from the machine directly where the WebServer is hosted?
Or https://YOURIPHERE/qlikview (where YOURIP is the IP address returned when you do ipconfig in the command prompt on that server)?
One point of clarification, as I do not see that anyone clarified this, are you using the QlikView Web Server service or the QlikView Settings service in this case? The latter would be used with the IIS web server, and if you are using IIS, then the cert needs to be configured via the IIS Manager etc. Just wanted to be sure we had not missed something easy on this one.
Regards,
Brett