Skip to main content

Restoring certificates

In case of a system crash, the certificates may need to be restored on the central node of your Qlik Sense site.

Do the following:

  1. Open the Task Manager in Microsoft Windows and stop all Qlik Sense services except the Qlik Sense Repository Database (QRD) service.
  2. Open a command prompt, and launch the Microsoft Management Console (mmc) as the user that runs the Qlik Sense services.
  3. Select File>Add/Remove Snap-in.
  4. Double-click Certificates.
  5. The Add or Remove Snap-ins window. "Certificates" is selected on the left.

  6. Select Computer account and click Next.
  7. The Certificates snap-in window. "Computer account" is selected.

  8. Select Local computer and click Finish.
  9. The Select Computer window. "Local computer" is selected.

  10. Double-click Certificates.
  11. The Add or Remove Snap-ins window, with Certificates (Local Computer) added on the right. "Certificates" is selected on the left.

  12. Select My user account and click Finish.
  13. The Certificates snap-in window. "My user account" is selected.

  14. Click OK.
  15. The Add or Remove Snap-ins window, with Certificates (Local Computer) and Certificates - Current User added on the right.

  16. Expand Certificates (Local Computer) in the left panel.
  17. The Console1 window with the Certificates (Local Computer) folder expanded.

  18. Right-click the Trusted Root Certification Authorities folder and select All Tasks>Import.
  19. The Console1 window. The Trusted Root Certification Authorities folder has been right-clicked, and All Tasks, then Import is selected.

  20. Click Next.
  21. The Certificate Import Wizard window. "Next" is highlighted.

  22. Browse to the file that contains the backed up Certificate Authority (CA) for all nodes in the site and then click Next. The CA is named <computer_that_issued_the_certificate>-CA by default.
  23. The Certificate Import Wizard's File to Import screen.

  24. Enter the password for the .pfx file (that is, the password that was given when the file was exported).
  25. Select Mark this key as exportable and Include all extended properties. Then click Next.
  26. Select Place all certificates in the following store and click Next.
  27. The Certificate Import Wizard's Certificate Store screen. "Place all certificates in the following store" is selected.

  28. Click Finish.
  29. The Completing the Certificate Import Wizard screen. "Finish" is selected.

  30. Click the Refresh button () and check that the imported CA is available in the Trusted Root Certification Authorities folder.
  31. Import certificates:
    1. Starting at step 11, repeat the procedure and import the server certificate to Certificates (Local Computer)>Personal>Certificates. The server certificate a) has the same name as the Domain Name System (DNS) name of the machine, and b) is signed by the CA for all nodes in the site.

    2. Starting at step 11, repeat the procedure and import the client certificate (that is, the ID of the client) to Certificates - Current User>Personal>Certificates. The client certificate is named QlikClient and is signed by the CA for all nodes in the site.

    3. Starting at step 11, repeat the procedure and import the QlikServiceCluster certificate, which is located under Certificates (Local Computer)>Personal>Certificates.

  32. Close the MMC console.
  33. No changes have to be saved.

  34. Start the Qlik Sense services. If the services are started manually, start them in the following order:
  35. Warning: If you are restoring the certificates as part of the Restoring a Qlik Sense site procedure, do not start the Qlik Sense services.
    1. Qlik Sense Service Dispatcher(QSD)
    2. Qlik Sense Repository Service (QRS)

      If the user running Qlik Sense services is not local administrator on the machine, you need to start Repository.exe from an elevated command prompt using the -bootstrap parameter.

      Services

    3. Qlik Sense Proxy Service (QPS), Qlik Sense Engine Service (QES), Qlik Sense Scheduler Service (QSS), and Qlik Sense Printing Service (QPR) in no specific order

    The start-up order is important. During start-up the QRS must be able to contact the Qlik License Service, which is managed by the QSD. The other services are dependent on the QRS. The QSD must therefore be running when the QRS is started.