[ERROR] Fatal exception during bootstrap: There is no RSA private key associated with this certificate

[Rakesh_HB]

Below error will appear when you execute the "Bootstrap" command to generate/regenerate the Certificates while you are migrating or upgrading the Qlik Sense Environment,

[ERROR] Fatal exception during bootstrap: There is no RSA private key associated with this certificate

Environment

• Qlik Sense Enterprise on Windows Any version

Resolution

Note: Please take assistance from your Admin/IT Team if you are not aware of the Certificates issued to your Qlik Sense site.

• Check if there are already "-CA" certificates present on the Certificate Store (MMC)
• Also, search if there is a 'Keys' directory in the following location: 
  • "C:\ProgramData\Microsoft\Crypto\"
  • It may have been renamed, missing, or its contents altered.
  • Until the Keys directory or its contents are returned to its original state Qlik will not operate.

• Take a backup of the "-CA" certificates issued to Qlik Sense and remove them from the Certificate Store (MMC)
• In order to delete and re-create, use this: How to recreate or just delete certificates in Qlik Sense - No access to QMC or Hub 
  
• Be sure the Qlik Sevice account has the full control on folder "C:\ProgramData\Microsoft\Crypto"

Tip:

After regenerating the certificates, if your UDC and Data Connections are failing, you must re-enter the passwords to all data connections and UDCs, since those encrypted passwords have a hash reference back to those certificates, once you remove the Certificates and create new ones, that reference gets broken, a new hash needs to in place, and to do so, you must re-enter the password.

Cause

• Someone moved or changed the Keys directory or altered its contents
• Private Key Corrupted
• No Private Key to Export. 

Related

[ERROR] Fatal exception during bootstrap: Keyset does not exist 

Creating 40 permanent worker threads for connection handler 

Service certificates 

Certificate trust 

[heij1421]

I had the same issue when moving  an existing environment to a new server.

We managed to solve this. The issue was that the customer had a group policy about certificates running and the certificate from the old environment was copied to the new server.  Because of this. the correct certificates were not created on a fresh new install and even recreating the certificates (How to recreate or just delete certificates in Qli... - Qlik Community - 1712692) did not do the trick.

I deleted the certificate on the new server of the old server in the Computer\trusted root folder using the MMC program. After that I ran the bootstap command ("C:\Program Files\Qlik\Sense\Repository\Repository.exe" -bootstrap -iscentral -restorehostname ). Then the certificate was created and the QMC could be started.