Skip to main content
Announcements
Have questions about Qlik Connect? Join us live on April 10th, at 11 AM ET: SIGN UP NOW

Qlik Sense: Generate .pfx/.cer certificates from .pem

No ratings
cancel
Showing results for 
Search instead for 
Did you mean: 
Damien_Villaret
Support
Support

Qlik Sense: Generate .pfx/.cer certificates from .pem

Last Update:

May 25, 2021 2:41:58 PM

Updated By:

Andre_Sostizzo

Created date:

Jul 1, 2017 5:12:13 AM


By default, Qlik Sense generates a set of certificates in .pem format on disk in C:\ProgramData\Qlik\Sense\Repository\Exported Certificates\.Local Certificates for internal use.
In the case your certificates installed in Windows to run Qlik Sense certificates have got corrupted or you do not have access to the QMC but need these certificates in Windows format in order to install it in the Windows certificates store (accessible via the mmc console)

 

Environment:

Qlik Sense Enterprise on Windows , all versions

 

Resolution:


In order to convert .pem certificates to Windows format (pfx/cer), we will need to use a tool such as openssl.

*Source code/binary files for openssl can be found on openssl website. This article does not explain how to install openssl

From the command line, use the cd command to navigate where the openssl binary is located and execute the following commands.

For the root certificate:

openssl x509 -outform der -in root.pem -out root.cer


For the server certificate:

openssl pkcs12 -export -out server.pfx -inkey server_key.pem -in server.pem
(You will be asked to choose a password for the new .pfx certificate, this can be left blank)


For the client certificate:

openssl pkcs12 -export -out client.pfx -inkey client_key.pem -in client.pem

(You will be asked to choose a password for the new .pfx certificate, this can be left blank)

Certificates will then need to be installed in Windows. You can choose "import" from the mmc console or simply double-click on each certificates and install it.
client.pfx (can be installed in the current user for the service account or in the local computer "personal" store)
server.pfx (should be installed in the local computer "personal" store)
root.cer (should be installed in "Trusted Root certification authorities" store for the local computer)

Labels (1)
Contributors
Version history
Last update:
‎2021-05-25 02:41 PM
Updated by: