Restoring certificates

In case of a system crash, the certificates may need to be restored on the central node of your Qlik Sense site.

Do the following:

1. Open the Windows Services application to stop all Qlik Sense services except the Qlik Sense Repository Database (QRD) service.
2. From the Windows start menu, type mmc to find the Microsoft Management Console (mmc) . Launch the mmc as the user that runs the Qlik Sense services.
3. Select File>Add/Remove Snap-in.
4. Double-click Certificates.

   

5. Select Computer account and click Next.

   

6. Select Local computer and click Finish.

   

7. Double-click Certificates.

   

8. Select My user account and click Finish.

   

9. Click OK.

   

10. Complete this step for each of the backup certificates. Make sure to import the backup certificate to the correct location.

    Backup certificate	Import Location	Issued to	Issued by
    The backup certificate for the Certificate Authority.	Certificates (Local Computer) > Trusted Root Certification Authority > Certificates	<server-name>-CA	<server-name>-CA
    The backup server certificate.	Certificates (Local Computer) > Personal > Certificates	<server-name>	<server-name>-CA
    The backup client certificate.	Certificates (Current User) > Personal > Certificates	QlikClient	<server-name>-CA
    The backup QlikServiceCluster certificate.	Certificates (Local Computer) > Personal > Certificates	QlikServiceCluster	<server-name>-CA

    1. Expand the certificate location for the certificate you want to import.

       Tip noteFor example, to import the Certificate Authority, expand Certificates (Local Computer) > Trusted Root Certification Authority > Certificates.
    2. Right-click the certificate folder, then select All Tasks>Import.

       

    3. Click Next.

       

    4. Browse to the file that contains the backed up certificate (.pfx), then click Next.

       

    5. Enter the password that was given when the file was exported for the .pfx file.

    6. Select Mark this key as exportable and Include all extended properties, then click Next.

       

    7. Select Place all certificates in the following store, then click Next.

       

    8. Click Finish.

       

    Information noteYou may need to refresh the mmc to see the imported certificate.
    Information noteMake sure to complete this step for each certificate.
11. Close the MMC console.
12. Start the Qlik Sense services. If the services are started manually, start them in the following order:
Warning noteIf you are restoring the certificates as part of the Restoring a Qlik Sense site procedure, do not start the Qlik Sense services.
1. Qlik Sense Service Dispatcher(QSD)

2. Qlik Sense Repository Service (QRS)

   If the user running Qlik Sense services is not local administrator on the machine, you need to start Repository.exe from an elevated command prompt using the -bootstrap parameter.

   Services

3. Qlik Sense Proxy Service (QPS), Qlik Sense Engine Service (QES), Qlik Sense Scheduler Service (QSS), and Qlik Sense Printing Service (QPR) in no specific order

The start-up order is important. During start-up the QRS must be able to contact the Qlik License Service, which is managed by the QSD. The other services are dependent on the QRS. The QSD must therefore be running when the QRS is started.