Qlik Replicate Self-assigning SSL certificate replacing imported cert(Windows)

[Alan_Wang]

This solution (modifying ServiceConfiguration.xml) is only valid for versions 6.6 to 7.0.

SSL Certificates that are imported are being replaced by Replicate’s self-assigning certificate on reboot. 

Resolution

Without ServiceConfiguration.xml in current versions

1. Stop the Qlik Replicate server service, followed by the Qlik Replicate UI server service
   
   
2. Extract the globalrepo data to a JSON file using these steps:
   
   
   1. Open an elevated command line (Run as Administrator)
      
      
   2. Run:
      
      

      RepUiCtl.exe repository export -r "c:\program files\attunity\replicate\data\GlobalRepo.sqlite" -f c:\temp\a.json

      Note: You can change the temporary storage location (c:\temp) for the file destination, and adjust the first part of the command to match your environment.
      
      Our example uses the filename a.json.
      
      
3. Open c:\templ\a.json with an editor (such as Notepad) and change test_https to false
   
   Example: "test_https": false,
   
   
4. Save the a.json file
   
   
5. Import the file using this command: 
   
   

   RepUiCtl.exe repository export -r "c:\program files\attunity\replicate\data\GlobalRepo.sqlite" -f c:\temp\a.json

6. Start the Qlik Replicate server service, followed by the Qlik Replicate UI server service.

Using ServiceConfiguration.xml in older versions

The Service Configuration parameters need to be changed to allow Qlik Replicate to stop testing the HTTP URL and overriding with a self-assigned certificate.

1. Locate the data directory for Qlik Replicate
   
   If the data directory was installed in a different location,  check by going to: 
   
   
   1. Services in the Start Menu
   2. Locating Attunity Replicate Server (May be named Qilk depending on installation)
   3. Right-click and choose Properties
      
      
      
      
   4. Data Directory location will be displayed after -d
      
      
2. Open the data directory
   
   
3. Open ServiceConfiguration.xml found in the Qlik Replicate data directory with any text editor
   
   Add the following to the ending of the service configuration:
   
   

   testHttps = "false"

   
   Full example:
   
   

   <ServiceConfiguration url="https://demo.com:443/attunityreplicate;http://demo.com:80/attunityreplicate" allowUnsafeProtocols="false" testHttps = "false" />

   
   
4. Save the file and reboot the machine
   
   
5. Clean the old SSL certificate and import the new certificate
   
   If the data directory is installed in a different location, add the data directory path to the certificate clean command:
   
   

   RepUiCtl.exe -d f:\data certificate clean​

Environment

Qlik Replicate 6.6 - 7.0

[nasarkhann]

I've come to know that the serviceconfiguration.xml file is no longer valid on later versions. Our is 2022.11.0.746. However, this issue keeps on happening in our environment as well. What could be the alternative solution in this case?

[Sonja_Bauernfeind]

Hello @nasarkhann 

I'm looking into an updated solution on this for you.

All the best,
Sonja

[Sonja_Bauernfeind]

Hello @nasarkhann 

I recommend logging a ticket with Support to investigate this as this setting is, indeed, only available for older versions.

All the best,
Sonja