Backing up certificates

Proceed as follows to make a backup of the certificates on the central node in a Qlik Sense site:

1. Select Start>Run.
2. Enter mmc and click OK.



3. Select File>Add/Remove Snap-in.
4. Double-click Certificates.



5. Select Computer account and click Next.



6. Select Local computer and click Finish.



7. Double-click Certificates.



8. Select My user account and click Finish.



9. Click OK.



10. Expand Certificates (Local Computer) in the left panel.



11. Expand the Trusted Root Certification Authorities folder and select the Certificates folder.
12. Right-click the certificate that is Certificate Authority (CA) for all nodes in the Qlik Sense site and select All Tasks>Export. The CA is named <machine_that_issued_the_certificate>-CA by default.



13. Click Next.



14. Select Yes, export the private key and click Next.



15. Select Personal Information Exchange.
16. Tick the Include all certificates in the certification path if possible and Export all extended properties boxes and then click Next.



17. Enter and confirm a password. Then click Next.

The password is needed when importing the certificate.



18. Enter a file name for the .pfx file and click Next.
    Tip noteIt is recommended to include the server name in the file name to avoid confusion with other certificate files.



19. Click Finish.

The .pfx file that contains the CA for all nodes in the Qlik Sense site is stored in the selected location.



20. Starting at step 11, repeat the procedure and export the server certificate (that is, the SSL certificate), which is located under Certificates (Local Computer)>Personal>Certificates. The server certificate a) has the same name as the Domain Name System (DNS) name of the machine, and b) is signed by the CA for all nodes in the Qlik Sense site.
21. Starting at step 11, repeat the procedure and export the client certificate (that is, the ID of the client), which is located under Certificates - Current User>Personal>Certificates. The client certificate is named QlikClient and is signed by the CA for all nodes in the Qlik Sense site.
22. Close the MMC console.

No changes have to be saved.