Skip to main content

Restoring certificates

In case of a system crash, the certificates may need to be restored on the central node of your Qlik Sense site.

  1. Open the Windows Services application to stop all Qlik Sense services except the Qlik Sense Repository Database (QRD) service.
  2. From the Windows start menu, type mmc to find the Microsoft Management Console (mmc) . Launch the mmc as the user that runs the Qlik Sense services.
  3. Select File>Add/Remove Snap-in.
  4. Double-click Certificates.

    The Add or Remove Snap-ins window. "Certificates" is selected on the left.

  5. Select Computer account and click Next.

    The Certificates snap-in window. "Computer account" is selected.

  6. Select Local computer and click Finish.

    The Select Computer window. "Local computer" is selected.

  7. Double-click Certificates.

    The Add or Remove Snap-ins window, with Certificates (Local Computer) added on the right. "Certificates" is selected on the left.

  8. Select My user account and click Finish.

    The Certificates snap-in window. "My user account" is selected.

  9. Click OK.

    The Add or Remove Snap-ins window, with Certificates (Local Computer) and Certificates - Current User added on the right.

  10. Complete this step for each of the backup certificates. Make sure to import the backup certificate to the correct location.

    Backup certificate Import Location Issued to Issued by
    The backup certificate for the Certificate Authority. Certificates (Local Computer) > Personal > Trusted Root Certification Authority <server-name>-CA <server-name>-CA
    The backup server certificate. Certificates (Local Computer) > Personal > Local Computer <server-name> <server-name>-CA
    The backup client certificate. Certificates (Current User) > Personal > Certificates QlikClient <server-name>-CA
    The backup QlikServiceCluster certificate. Certificates (Local Computer) > Personal > Certificates QlikServiceCluster <server-name>-CA
    1. Expand the certificate location for the certificate you want to import.

      Tip: For example, to import the Certificate Authority, expand Certificates (Local Computer) > Personal > Trusted Root Certification Authority.
    2. Right-click the certificate folder, then select All Tasks>Import.

      The Console1 window. The Trusted Root Certification Authorities folder has been right-clicked, and All Tasks, then Import is selected.

    3. Click Next.

      The Certificate Import Wizard window. "Next" is highlighted.

    4. Browse to the file that contains the backed up certificate (.pfx), then click Next.

      The Certificate Import Wizard's File to Import screen.

    5. Enter the password that was given when the file was exported for the .pfx file.
    6. Select Mark this key as exportable and Include all extended properties, then click Next.

    7. Select Place all certificates in the following store, then click Next.

      The Certificate Import Wizard's Certificate Store screen. "Place all certificates in the following store" is selected.

    8. Click Finish.

      The Completing the Certificate Import Wizard screen. "Finish" is selected.

    9. Note: You may need to refresh the mmc to see the imported certificate.
      Note: Make sure to complete this step for each certificate.
  11. Close the MMC console.
  12. Start the Qlik Sense services. If the services are started manually, start them in the following order:
  13. Warning: If you are restoring the certificates as part of the Restoring a Qlik Sense site procedure, do not start the Qlik Sense services.
    1. Qlik Sense Service Dispatcher(QSD)
    2. Qlik Sense Repository Service (QRS)

      If the user running Qlik Sense services is not local administrator on the machine, you need to start Repository.exe from an elevated command prompt using the -bootstrap parameter.

      Services

    3. Qlik Sense Proxy Service (QPS), Qlik Sense Engine Service (QES), Qlik Sense Scheduler Service (QSS), and Qlik Sense Printing Service (QPR) in no specific order

    The start-up order is important. During start-up the QRS must be able to contact the Qlik License Service, which is managed by the QSD. The other services are dependent on the QRS. The QSD must therefore be running when the QRS is started.