Migration of QlikSense users to a new domain

[TomBond77]

Good Day

I am very new to Qlik, I need to solve a problem.

QlikSense consumers were migrated from Windows domain1 to domain2.  After accessing the NPrinting Service page, selecting a report and trying to edit a template (through Actions) nothing happens. The template doesn't open.

Current Version:  Qlik NPrinting February 2019 SR1, Version: 19.0.4.0

I have checked the NPrinting connections. There is no identity  string existing on the new domain2. I tried to define a new connection with the domain2 as first string in the field identity.  The verification shows the attached errors.

The Qlik NPrinting engine is in the old domain1 environment.

• Action "Edit Template": If this function is not working, do we talk about a domain problem?
• Am I on the right track regarding creating an additional connection with the new domain2? 
• Or do we need to set up a new server engine in the new domain?

Many thanks for your help.

Best Regards

Tom

[Ruggero_Piccoli · Accepted solution]

Hi,

Your installation doens't met the requirements to connect Qlik NPrinting with Qlik Sense.

You can refer to:

- https://help.qlik.com/en-US/nprinting/November2019/Content/NPrinting/GettingStarted/HowCreateConnect...

- https://help.qlik.com/en-US/nprinting/November2019/Content/NPrinting/DeployingQVNprinting/NPrinting-...

The Qlik NPrinting Engine must be in the same domain as the Qlik Sense server and the Qlik NPrinting Engine Windows service must be run by a domain user that is RootAdmin in Qlik Sense. Otherwise Qlik NPrinting will not be able to connect to Qlik Sense. 

The Qlik NPrinting Engines must be connected and with the Online green status.

You can also do a Run Verification that will show you the correct error messages.

Best Regards,

Ruggero

[TomBond77 · Accepted solution]

Hi Ruggero

Many thanks for your answer, very appreciated!

This means that Qlik NPrinting Engine must be in the same domain as the Qlik Sense server, in our case it is domain1 for both.  

Qlik NPrinting Engine Windows service must be run by a domain user, e.g. domain2, that is RootAdmin in Qlik Sense. We already use domain1 as domain user in Qlik NPrinting Engine Windows service. This domain user works fine.

Conclusion: We only have to add domain2 to the Qlik NPrinting Engine Windows service. Will this be sufficient?

Is my understanding correct?

Best Regards

Thomas

[Ruggero_Piccoli]

Hi,

I think yes. The Qlik NPrinting Engine server must run with a Windows domain user that can log into the Qlik Sense servers you want to connect with RootAdmin privileges. The domain user that run the Engine service must be able to login into the Qlik Sense hub.

In case of errors:

- be sure all Engines are in online green status

- in the connection do a Run Verification

- check the logs

Best Regards,

Ruggero

[Frank_S · Accepted solution]

Since you are using Feb. 2019, and since you made significant changes regarding domain memberships, you should also take the extra steps to:

• check to ensure that the NPrinting service account remains ROOTADMIN on the QS server
• re-export certificates from the Qlik Sense server and then
• re-import them on the NPrinting server while logged on as the NPrinting server service account

From June 2019 and newer versions a simpler, more robust method of reading Qlik Sense certificate was introduced. Since you are not on a version that supports that method, you will need to use the QMCcertificateinstaller.exe as before. The steps to perform are in the link below.

https://help.qlik.com/en-US/nprinting/February2019/Content/NPrinting/DeployingQVNprinting/NPrinting-...

[TomBond77]

Many thanks Frank and Ruggero

I will have to check your valuable advises.

I am very thankful to your help and will let you know the result soon.

Enjoy this lovely rainy day 🙂

Tom