Skip to main content
Announcements
Have questions about Qlik Connect? Join us live on April 10th, at 11 AM ET: SIGN UP NOW

How to enable HTTPS for Qlik GeoAnalytics Server or change the currently used certificate

No ratings
cancel
Showing results for 
Search instead for 
Did you mean: 
Bjorn_Wedbratt
Former Employee
Former Employee

How to enable HTTPS for Qlik GeoAnalytics Server or change the currently used certificate

Last Update:

Apr 20, 2021 6:13:25 AM

Updated By:

Sonja_Bauernfeind

Created date:

May 31, 2017 3:58:31 AM

It is recommended to enable HTTPS for Qlik GeoAnalytics Server. This can be done either during the installation or by editing the config.ini after the installation.  

The deployed SSL certificate may need to be updated regularly, which requires a repeat of the initial installation steps. 

 

Environment: 

 

 

Resolution:

 

Before you begin
  • Make sure you have a certificate in PKCS12 (.pfx, p12) format, including the private key! This can be exported out from Windows Certificate Manager, Qlik Sense Management Console (if using self-signed certificates generated by Qlik Sense) or acquired by your certificate authority
  • Make sure the certificate matches the hostname where Qlik GeoAnalytics Server is installed, (example: myserver.domain.local ) 
  • Place the certificate where it can be accessed by Qlik GeoAnalytics Server

 

Set / Change certificate during install

The recommended way to enable HTTPS is to run the installation package and set/change the certificate during install. Setting the certificate during install will automatically obfuscate the password stored in config.ini.

  1. Launch the Installer
  2. On the second step of Server Settings (Basic) enable HTTPS and browse to the desired certificate. See fig 1.

    Fig 1Fig 1

  3. Proceed with the installation. 

 
 

Alternative way to enable HTTPS on an already installed Qlik GeoAnalytics Server

  1. Edit config.ini found in %ProgramData%\Qlik GeoAnalytics Server and add the following to the [SSL] section, replacing details to match your environment:
    [SSL]
    sslEnabled=true
    sslPort=443
    sslKeystore=c:\\path_to_certificate\\certificate_filename.pfx
    sslPassword=certificate_password​
  2. While encryption of passwords is required in later versions, it should still be possible to use clear text password in the ini. However, it's recommended to re-run the installation program to set the parameters and then the password will be obfuscated like enc:0B0115327474.

    All obfuscated passwords should start with enc:

  3. Open Qlik GeoAnalytics Configure Service console and restart the service
  4. Verify HTTPS working properly.
  5. Any errors/warnings about the certificate not being valid, such as missing Subject Alternative Name, issues with the certificate chain etc may result in errors when using the server and needs to be investigated and fixed.
Labels (1)
Contributors
Version history
Last update:
‎2021-04-20 06:13 AM
Updated by: