Installing Server Certificates without Private Keys

[deec]

I work in a large enterprise environment.

My web team provides a .cer file. I have been able to use these on Qlikview Servers by adding them to IIS without issue. However, it looks like the NPrinting certificate installation instructions require a .crt and a related .key file.

I tried adding the .cer file provided by changing its extension to .crt. Then following the instructions to save it to the appropriate directory and un-commenting the related line in the app.conf file. However this resulted in the server failing to respond at https...server:4994

https://help.qlik.com/en-US/nprinting/September2018/Content/NPrinting/DeployingQVNprinting/Installin...

My question is whether I should be able to get this to work using the .cer provided. Without a related private key file (.key)

If not, and a .crt and .key file are really the only way to do this, my web team suggested we use OpenSSL to make a .key out of our .cer
That will be the next thing we try unless someone has a better solution

[Frank_S]

Please check the following as you must use a .cer and .key to properly secure your NPrinting server URL.

https://help.qlik.com/en-US/nprinting/September2018/Content/NPrinting/DeployingQVNprinting/Managing-...

Hope this helps.

[michalikj]

I'd start with just opening the file in a text editor. If you have sections like:

-----BEGIN CERTIFICATE-----
<stuff>
-----END CERTIFICATE-----
-----BEGIN RSA PRIVATE KEY-----
<stuff>
-----END RSA PRIVATE KEY-----

then you don't even need to faff with openssl, just put first section in .crt file and the second in .key file