Inter Service communication using HTTPS

[vsharma1]

Hi,

1. I have installed all Qlikview services on Machine A except DSC. I have enabled HTTPS on Machine A on QMC and Access Point. All services are running fine

2. I have installed DSC on Machine B . Service is running fine 

3.  Issue: I am unable to add DSC service to issue the certificate . I am not getting Certificate Window after adding DSC in QMC on Machine A 

I am following below Qlikview Help link and I am stuck on Step 3 mentioned under section "Adding Services to Issue the Certificates"

[Brett_Bleess]

I see no Help link in your post, so that may partially explain the no responses, here are a few links that should provide all you need, from what you described, it sounds to me you did not implement Certificate Trust, you are trying to implement the UseHTTPS setting in the service config files, and that requires a separate SSL certificate provided by you and the ports must be bound to it:

https://help.qlik.com/en-US/qlikview/April2019/Subsystems/Server/Content/QV_Server/QlikView-Server/Q...

https://help.qlik.com/en-US/qlikview/April2019/Subsystems/Server/Content/QV_Server/QlikView-Server/Q...

If you are referring to Step 3 in the second link, you should not need to change anything if you chose Certificate Trust option during product installation.  The danger is changing the exe.config files is if you perform an upgrade later, things will reset to the original choice you made during installation, likely breaking things and causing you to wonder what happened, so if you did not choose Certificate Trust during installation, I would suggest uninstalling and reinstalling being sure to choose Certificate Trust to ensure on the server running the QMS, things are correctly set automatically, then it is just a matter of getting the certificate to each of the other nodes in the environment running any other QlikView services.  

Running Certificate Trust encrypts all service traffic between the services, but you will still need a separate SSL certificate in order to run HTTPS to the AccessPoint or the QMC.

The other key thing is to ensure the QlikView ports mentioned in the first Help link are open between the servers too.  

Regards,
Brett

[vsharma1]

Hi Brett,

Thanks for your reply. I am able to resolve the issue . it was machine specific issue. I tried same on another machine and I am not facing the issue

I have one more question. I am trying to enable HTTPS on Access Point and QMC. Do I need to install Qlikview with Certificate Trust or I can install using Qlikview Administrator Group option?

[Brett_Bleess]

Yes, if you just want to force HTTPS to access the AccessPoint page and the QMC pages, have a look at the following articles:

https://support.qlik.com/articles/000002484 

https://support.qlik.com/articles/000003344 

https://support.qlik.com/articles/000003889 

I think those should be everything you need.

Regards,
Brett