Using Server Certificates for Data Encryption in Qlik Sense Enterprise on Windows

[Chip_Matejowsky]

Starting with Qlik Sense Enterprise on Windows November 2019, Data Encryption In Qlik Sense App (QVF) And Data (QVD) Files is configurable. The default location where the certificate used for Data Encryption was stored is the Personal store for the Qlik Sense service account. This article will document how to use the Server store to encrypt data in Qlik Sense. This may be needed for hardened environments where interactive logon by the service account is either not permitted or not possible.

Environment:

• Qlik Sense Enterprise on Windows November 2019 or later

Resolution:

1. Place certificate in the Server > Personal store (on all nodes if applicable)
2. Stop the Qlik Sense Engine and Qlik Sense Service Dispatcher services (on all nodes if applicable)
3. Add the following key into the Engine's Settings.ini: EncryptionAllowStoreLocationCurrentMachine=1 (on all nodes if applicable)
4. Start Qlik Sense Engine and Qlik Sense Service Dispatcher services (on all nodes if applicable)

Refer to the article on How to modify Qlik Sense Engine's Settings.ini for more exhaustive coverage on the process for modifying the Engine's Settings.ini.