Install a certificate on a Qlik Sense server
The installation of a certificate on Qlik Sense goes through its digital fingerprint ("Thumbprint"). To find the thumbprint of a certificate, it must first be installed on the Windows server.
Generation of CSR
The Qlik Sense interface does not offer an option to generate the CSR. So you have to use a third-party tool for that.
- The automatic method: Keybot
- The manual method: you can use OpenSSL (installation under Windows) as well as our tool for
creation of a CSR. You can also use Windows MMC.
After creating the CSR, copy paste the entire CSR into our order form.
Certificate installation
Once the certificate has been delivered, it must be installed in the Windows MMC. First, add the certificates component in the MMC and then depending on the method used to generate the CSR, the format of the certificate to install is different:
- If you have chosen the automatic method with Keybot: you must generate a PFX. To do this, go to the status page of your certificate and click on the "Generate PFX / PEM" button.
- If you used the manual method:
- With OpenSSL: download the p7b file available on the status page of your certificate, button "View certificate" and "View certificate at PKCS7 format ". Then use our documentation to generate a PFX file: Make a pkcs12 from files for OpenSSL
- With the Windows MMC: download the p7b file available on the status page of your certificate, button "View certificate" and "View certificate at PKCS7 format ".
Once the certificate in PFX or P7B format is available, go to the Windows Certificates MMC and follow our documentation to install the certificate : nstall a certificate from Windows Server with the Certificates MMC
Once installed, double click on your certificate in the Windows MMC. Go to the "Details" tab to find the Thumbprint. Copy paste it into Windows Notepad.
- Now open the Qlik Management Console (QMC)
- Go to Proxies, select your proxy and click on Edit
- In the right panel, click Security. Go down and look for "SSL browser certificate thumbprint"
- Paste the previously rotated thumbprint and click on Apply
Once this is done, the service will automatically restart and your certificate will be installed.
You can test the correct installation of your certificate using our Copibot tool, available from your certificate status page, button "Test the installation".