SSL on QlikView Publisher (Version 10)

[sjoelsona8]

I am trying to set up and configure SSL on my QlikView server for QlikView Server/Publisher 10 SR1. I am using the QlikView Web Server, not IIS. I've followed the QlikView Server Reference Manual as best I could but I'm unsure of a few setting changes. I hope someone can clarify. Here are my steps so far:

1. Gain a valid certificate for the web site - DONE.

2. Activate SSL (pg 261)

• Import Certificate - DONE.
• Get the Thumbprint - DONE.
• Generate a GUID - DONE.
• Bind to SSL in Windows Server 2008 - DONE.
• Additional changes for the QlikView Web Server -

Make changes to config.xml for QlikView Web Server to add the full URL used for SSL. The default location for the config.xml file is C:\Program Files\QlikView\Server\QvWebServer. Note that the URL must match the URL for which the certificate is valid.
<Url>https://QVS.companyx.local:443/</Url>

Need help here. I don't have a <Url></Url> line in my config.xml file. I have a <ConfigUrl>http://_:4750/qvws.asmx</ConfigUrl> line. Do I need to modify this line?

3. Modify the QVManagementService.exe.config file by changing the UseHTTPS value from false to TRUE. (Page 201) -DONE

4. Modify the QvDistributionService.exe.config file by changing the UseHTTPS value from false to TRUE. (Page 202) - DONE

5. Modify the QVDirectoryServiceConnector.exe.config file by changing the UseHTTPS value from false to TRUE. (Page 202) -DONE

6. SSL on QlikView Publisher (pg 209)

• The config file for each service must be changed. - DONE (see above)
• In C:\ProgramData\QlikTech\WebServer\config.xml (C:\Documents and Settings\All Users\Application Data\QlikTech\WebServer\config.xml on older systems) change the setting <ConfigUrl>http://_:4750/qvws.asmx</ConfigUrl> to include https instead of http. - DONE.

6.3 It is important that the URL for the services match the URL in the certificate. The settings must be changed in the user interface: System, Setup, Service, General, Location.

- This is also where I need assistance.

If my certificate's URL is https://qv.mycompany.com, then what exactly do I change each service's URL location to in the QEMC?

How many and what places in the QEMC do I need to make this change?

[shelvinpatel]

Hi Arun,

See below thread:

http://community.qlik.com/message/193523

Use the document provided by the moderator.  As you have already got certificate that means first 11 pages are done.  The next steps:

Activate certificate on Qlikview server (page 12 to 14)

Bind certificate (page 15 to 16)

Ignore addtional changesfor Qlikview HTTP server and amend the port from QEMC as described in the given link.

Best of luck.

Thanks, Shelvin

[#3]

Thanks Shelvin.

I have done that ...but the next problem is how to automatically redirect http to https.

Now user is forced to write https:\\servername.com .

Please suggest.

Thanks

Arun Goel

[shelvinpatel]

Hi Arun,

As your QV WebServer is now only serving 443 (SSL) port therefore you need to notify user the change of URL. Unfortunately QV Web server doesn't allow both ports – 80 & 443 simultaneously (as far as I am aware) like IIS otherwise one could have set up a html page with url redirect.

Thanks, Shelvin