Qlik® | Support Portal
Quick Links
Contact
Find Answers

Join Qlik Community

Collaborate with over 60,000 Qlik technologists and members around the world to get answers to your questions, and maximize success.

Join Us
Get Support

Have a Question?

Search Qlik's Support knowledge database or request assisted support for your highly complex issues.

Submit a Case
Talk with a Representative

Critical Issues

Experiencing a business critical issue? Please Contact us by phone. Click here to view phone numbers by region.

Contact Us
My Account
Welcome Guest
×
Knowledge

How to enable HTTPS for Qlik GeoAnalytics Server or change the currently used certificate

Article Number: 000034824 | Last Modified: 2019/01/24

Description

It is recommended to enable HTTPS for Qlik GeoAnalytics Server. This can be done either during the installation, or by editing the config.ini after the installation.  

The deployed SSL certificate may need to be updated regularily, which requires a repeat of the initial installation steps. 

Environment: 
Any Qlik GeoAnalytics Version 

Cause

GeoAnalytics using HTTP need to connect to a QlikView/Qlik Sense HTTPS server.

Resolution

Before you begin

  • Make sure you have a certificate in PKCS12 (.pfx, p12) format, including the private key! This can be exported out from Windows Certificate Manager, Qlik Sense Management Console (if using self-signed certificates generated by Qlik Sense) or acquired by your certificate authority
  • Make sure the certificate matches the hostname where Qlik GeoAnalytics Server is installed, (example: myserver.domain.local ) 
  • Place the certificate where it can be accessed by Qlik GeoAnalytics Server

Set / Change certificate during install

The recommended way to enable HTTPS is to run the installation package and set / change the certificate during install:
User-added image
Setting the certificate during install will automatically obfuscate the password stored in config.ini

Alternative way to enable HTTPS on an already installed Qlik GeoAnalytics Server

  • Edit config.ini found in %ProgramData%\Qlik GeoAnalytics Server and add the following to the [SSL] section, replacing details to match your environment:
[SSL]
sslEnabled=true
sslPort=443
sslKeystore=c:\\path_to_certificate\\certificate_filename.pfx
sslPassword=certificate_password
  • While encryption of passwords is required in later versions, it should still be possible to use clear text password in the ini. However it's recommended to re-run the installation program to set the parameters and then the password will be obfuscated like enc:0B0115327474.
    All obfuscated passwords should start with enc:
  • ​Open Qlik GeoAnalytics Configure Service console and restart the service
  • Verify HTTPS working properly by accessing https://<yourserverhost>/ravegeo/geoanalytics/api/testConnection?version=1.1
    • any errors/warnings about the certificate not being valid, such as missing Subject Alternative Name, issues with the certificate chain etc may result in errors when using the server and needs to be investigated and fixed

Was this content helpful?

   

Get Answers

Find Answers

Qlik Community

Collaborate with over 60,000 Qlik technologists and members around the world to get answers to your questions, and maximize success.

Join Us
Get Support

Have a Question?

Search Qlik's Support Knowledge database or request assisted support for highly complex issues.

Submit a case
Talk with a Representative

Critical Issues

Experiencing a serious issue, please contact us by phone. View phone numbers and hours by region.