Renew self-signed certificates after they expire

If the self-signed certificates used by Qlik Sense Enterprise on Windows expire, services and integrations that rely on them can stop working. Qlik Sense does not automatically monitor certificate expiration and renew certificates. To renew expired self-signed certificates, delete the expired certificates and exported certificate files, and then restart Qlik Sense services so the system can generate new certificates.

Before you start

• Plan a maintenance window. This procedure causes downtime.

• Log on to the central node using the Qlik Sense service account.
• Make sure you have permission to stop and start Qlik Sense services and manage certificates on the local computer.

• Optional: Back up the certificates before you delete them.

Renew expired certificates

1. Stop all Qlik Sense services on the central node, but keep the repository database running.

2. Delete expired certificates by using Microsoft Management Console (MMC):

   1. Open mmc.exe.

   2. Add the Certificates snap-in and select Computer account, and then select Local computer.

   3. Delete expired certificates from:

      • Personal > Certificates
      • Trusted Root Certification Authorities > Certificates

   4. Delete QlikClient from Current User > Personal > Certificates

      • Current User > Personal > Certificates

   Delete only certificates that belong to Qlik Sense and have expired. If you are unsure, back up the certificates before you delete them.

3. Delete exported certificate files:

   • Delete the contents of the following folder: C:\ProgramData\Qlik\Sense\Repository\Exported Certificates

4. Start all Qlik Sense services.

   When services start, Qlik Sense generates new self-signed certificates.

5. Update data connection credentials:

   • In the Qlik Management Console, re-enter passwords for data connections that store credentials.