
Employee
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
How to enable HTTPS for Qlik GeoAnalytics Server or change the currently used certificate
Last Update:
Apr 20, 2021 6:13:25 AM
Updated By:
Created date:
May 31, 2017 3:58:31 AM
It is recommended to enable HTTPS for Qlik GeoAnalytics Server. This can be done either during the installation or by editing the config.ini after the installation.
The deployed SSL certificate may need to be updated regularly, which requires a repeat of the initial installation steps.
Environment:
Resolution:
Before you begin
- Make sure you have a certificate in PKCS12 (.pfx, p12) format, including the private key! This can be exported out from Windows Certificate Manager, Qlik Sense Management Console (if using self-signed certificates generated by Qlik Sense) or acquired by your certificate authority
- Make sure the certificate matches the hostname where Qlik GeoAnalytics Server is installed, (example: myserver.domain.local )
- Place the certificate where it can be accessed by Qlik GeoAnalytics Server
Set / Change certificate during install
The recommended way to enable HTTPS is to run the installation package and set/change the certificate during install. Setting the certificate during install will automatically obfuscate the password stored in config.ini.
- Launch the Installer
- On the second step of Server Settings (Basic) enable HTTPS and browse to the desired certificate. See fig 1.
Fig 1
- Proceed with the installation.
Alternative way to enable HTTPS on an already installed Qlik GeoAnalytics Server
- Edit config.ini found in %ProgramData%\Qlik GeoAnalytics Server and add the following to the [SSL] section, replacing details to match your environment:
[SSL] sslEnabled=true sslPort=443 sslKeystore=c:\\path_to_certificate\\certificate_filename.pfx sslPassword=certificate_password
- While encryption of passwords is required in later versions, it should still be possible to use clear text password in the ini. However, it's recommended to re-run the installation program to set the parameters and then the password will be obfuscated like enc:0B0115327474.
All obfuscated passwords should start with enc: - Open Qlik GeoAnalytics Configure Service console and restart the service
- Verify HTTPS working properly.
- Any errors/warnings about the certificate not being valid, such as missing Subject Alternative Name, issues with the certificate chain etc may result in errors when using the server and needs to be investigated and fixed.
4,356 Views
Comments

Contributor III
2025-01-13
09:44 AM
- Mark as Read
- Mark as New
- Bookmark
- Permalink
- Report Inappropriate Content
Please suggest the steps to ENCRYPT the PFX Password as well to put it in the "config.ini" file.