Qlik NPrinting will not read Qlik Sense certificates

You have added your Qlik Sense certificates to the correct folder on your Qlik NPrinting Server and Qlik NPrinting Engine. However, the Qlik NPrinting web console will not read them.

Possible cause  

• The Qlik Sense certificates did not export properly.
• Your security settings require certificates to be stored in the user certificates store.
• Your intranet security settings may need to be changed.

Proposed action  

Make sure that you have followed the requirements on Connecting Qlik NPrinting with Qlik Sense. If that does not solve the issue, re-export your certificates and update your intranet security settings.

Exporting the certificates

Your Qlik Sense administrator should follow these export instructions: Connecting Qlik NPrinting with Qlik Sense.

You need different certificates, depending on your version of Qlik NPrinting:

• Qlik NPrinting June 2019 or later: client.pfx. You can rename this file if you are connecting to multiple Qlik Sense deployments.
• Qlik NPrinting April 2019 or earlier: client.pfx, server.pfx, and root.cer. You cannot rename these files.

Installing the certificates in the user certificates store

Qlik Sense only needs the client.pfx certificate file to accept connections. If this certificate is copied to the Qlik NPrinting installation folder (C:\Program Files\NPrintingServer\Settings\SenseCertificates), it will be read and used to sign requests to the Qlik Sense server. There is no need for the server.pfx and root.cercertificates.

If your security policies require that certificates not be stored in a file system, Qlik NPrinting can read certificates from the user certificates store. You need all three certificates: client.pfx, server.pfx, and root.cer. You must use the QmcCertificatesInstaller.exe tool to install certificates in the store. It combines all three into a trust chain, and stores them in the certificate store.

Do the following:

1. Receive the exported and renamed Qlik Sense certificates from your Qlik Sense system administrator.

2. Log into the Qlik NPrinting Server running the Qlik NPrinting scheduler service, as the WindowsQlik NPrinting Server services administrator.

3. Add the certificates to C:\Program Files\NPrintingServer\Settings\SenseCertificates. Qlik NPrinting will automatically identify the correct one to be used for each connection.

   This folder must not be renamed or customized.

   Information note

   You should only keep active Qlik Sense certificates used by Qlik NPrinting connections in the C:\Program Files\NPrintingServer\Settings\SenseCertificates folder.

   We recommend you remove any certificates that are not in use.

4. Repeat this process on each Qlik NPrinting Engine running the Qlik NPrinting Engine service, using the WindowsQlik NPrinting Engine services administrator.

Additional user access allocation in Qlik Sense is not required for a user to view reports in the Qlik Sense hub.

Updating your intranet security settings

Certain intranet settings may block connections to Qlik Sense servers. If a server is not responding, you should change the intranet settings.

Do the following:

1. Log into the Qlik NPrinting Server running the Qlik NPrinting scheduler service, as the WindowsQlik NPrinting Server services administrator.

2. Open the WindowsControl Panel.
3. Go to Internet Options.
4. Click Change security settings.
5. Click the Security tab.
6. Select Local Intranet.
7. Click the Sites button, click the Advanced button.
8. Add all of the Qlik Sense Proxy Server computer names to the list, including the domain name: https://sense_proxy_computer_name.domain_name.
9. Click Close.
10. Click Ok twice to close the Internet Properties window.
11. Repeat this process on each Qlik NPrinting Engine running the Qlik NPrinting Engine service, using the WindowsQlik NPrinting Engine services administrator.