Restoring certificates

In case of a system crash, the certificates may need to be restored on the central node of your Qlik Sense site.

Do the following:

  1. Open the Task Manager in Microsoft Windows and stop all Qlik Sense services except the Qlik Sense Repository Database (QRD) service.
  2. Open a command prompt, and launch the Microsoft Management Console (mmc) as the user that runs the Qlik Sense services..
  3. Select File>Add/Remove Snap-in.
  4. Double-click Certificates.
  5. Select Computer account and click Next.
  6. Select Local computer and click Finish.
  7. Double-click Certificates.
  8. Select My user account and click Finish.
  9. Click OK.
  10. Expand Certificates (Local Computer) in the left panel.
  11. Right-click the Trusted Root Certification Authorities folder and select All Tasks>Import.
  12. Click Next.
  13. Browse to the file that contains the backed up Certificate Authority (CA) for all nodes in the site and then click Next. The CA is named <computer_that_issued_the_certificate>-CA by default.
  14. Enter the password for the .pfx file (that is, the password that was given when the file was exported).
  15. Select Mark this key as exportable and Include all extended properties. Then click Next.
  16. Select Place all certificates in the following store and click Next.
  17. Click Finish.
  18. Click the Refresh button () and check that the imported CA is available in the Trusted Root Certification Authorities folder.
  19. Starting at step 11, repeat the procedure and import the server certificate to Certificates (Local Computer)>Personal>Certificates. The server certificate a) has the same name as the Domain Name System (DNS) name of the machine, and b) is signed by the CA for all nodes in the site.
  20. Starting at step 11, repeat the procedure and import the client certificate (that is, the ID of the client) to Certificates - Current User>Personal>Certificates. The client certificate is named QlikClient and is signed by the CA for all nodes in the site.
  21. Close the MMC console.
  22. No changes have to be saved.

  23. Start the Qlik Sense services. If the services are started manually, start them in the following order:
  24. Warning: If you are restoring the certificates as part of the Restoring a Qlik Sense site procedure, do not start the Qlik Sense services.
    1. Qlik Sense Repository Service (QRS)

      If the user running Qlik Sense services is not local administrator on the machine, you need to start Repository.exe from an elevated command prompt using the -bootstrap parameter.

      Services

    2. Qlik Sense Proxy Service (QPS), Qlik Sense Engine Service (QES), Qlik Sense Scheduler Service (QSS), and Qlik Sense Printing Service (QPR) in no specific order

    The order is important because the QRS is dependent on the QRD and the rest of the services are dependent on the QRS.

Did this information help you?

Thanks for letting us know. Is there anything you'd like to tell us about this topic?

Can you tell us why it did not help you and how we can improve it?