Installing certificates

To ensure that Qlik NPrinting uses the certificates you must install them. You can install your self-signed or a CA signed certificate.

The certificate file name is NPrinting.crt and the private key file name is NPrinting.key. You can give them the file names you prefer, but change the instructions accordingly.

Certificates installation on Qlik NPrinting Server June 2017 or later

Do the following:

1. Copy the certificate NPrinting.crt and the related private key NPrinting.key into the appropriate folders:
   1. For the NewsStand: %ProgramData%\NPrinting\newsstandproxy\.

      Typical path is C:\ProgramData\NPrinting\newsstandproxy\.

   1. For the Qlik NPrinting web console: %ProgramData%\NPrinting\webconsoleproxy\.

      Typical path is C:\ProgramData\NPrinting\webconsoleproxy.

2. Change both proxy configuration files to refer to the new certificate file:

   1. Edit the NewsStand proxy configuration file: %ProgramData%\NPrinting\newsstandproxy\app.conf.

      Uncomment by removing the # and change or add the following lines to:

      http.sslcert=${ProgramData}\NPrinting\newsstandproxy\NPrinting.crt. Change the certificate file name if necessary.

      http.sslkey=${ProgramData}\NPrinting\newsstandproxy\NPrinting.key. Change the private key file name if necessary.

      ${ProgramData} is the Windows ProgramData environment variable with the notation for the configuration file. As alternative you can insert your full path, for example C:\ProgramData\NPrinting\newsstandproxy\NPrinting.crt.

   2. Edit the Qlik NPrinting web console proxy configuration file: %ProgramData%\NPrinting\webconsoleproxy\app.conf.

      Uncomment by removing the # and change or add the following lines to:

      http.sslcert=${ProgramData}\NPrinting\webconsoleproxy\NPrinting.crt. Change the certificate file name if necessary.

      http.sslkey=${ProgramData}\NPrinting\webconsoleproxy\NPrinting.key. Change the private key file name if necessary.

      ${ProgramData} is the Windows ProgramData environment variable with the notation for the configuration file. As alternative you can insert your full path, for example C:\ProgramData\NPrinting\webconsoleproxy\NPrinting.crt.

3. You must stop and restart the Qlik NPrinting web engine service because new certificates are read only during the service start-up process.

Certificates installation on Qlik NPrinting Server 17.3 or older

Qlik NPrinting web console and NewsStand from 17.0 to 17.3 versions have different configuration folders structure than June 2017 or higher versions.

Do the following:

1. Copy the certificate NPrinting.crt and the related private key NPrinting.key into the appropriate folders:
   1. For the NewsStand:

      [proxy installation root]\proxy\newsstandproxy\src\qlik.com\newsstandproxy\conf. For example C:\Program Files\NPrintingServer\proxy\newsstandproxy\src\qlik.com\newsstandproxy\conf.

   1. For the Qlik NPrinting web console: [proxy installation root]\proxy\webconsoleproxy\src\qlik.com\webconsoleproxy\conf.

      For example C:\Program Files\NPrintingServer\proxy\newsstandproxy\src\qlik.com\newsstandproxy\conf.

2. Change both proxy configuration files to refer to the new certificate file:
   1. Edit the NewsStand proxy configuration file: [proxy installation root]\proxy\newsstandproxy\src\qlik.com\newsstandproxy\conf\app.conf.

      Change or add the following lines to:

      http.sslcert=.\src\qlik.com\ newsstandproxy\conf\NPrinting.crt. Change the certificate file name if necessary.

      http.sslkey=.\src\qlik.com\ newsstandproxy\conf\NPrinting.key. Change the private key file name if necessary.

      The path is related to the proxy executable location, in this case %ProgramFiles%\NPrintingServer\proxy\newsstandproxy.

   2. Edit the Qlik NPrinting web console proxy configuration file: [proxy installation root]\proxy\webconsoleproxy\src\qlik.com\webconsoleproxy\conf\app.conf.

      Change or add the following lines:

      http.sslcert=.\src\qlik.com\webconsoleproxy\conf\NPrinting.crt. Change the certificate file name if necessary.

      http.sslkey=.\src\qlik.com\webconsoleproxy\conf\NPrinting.key. Change the private key file name if necessary.

      The path is related to the proxy executable location, in this case %ProgramFiles%\NPrintingServer\proxy\webconsoleproxy.

3. You must stop and restart the Qlik NPrinting web engine service because new certificates are read only during the service start-up process.

Installation check

Connect to the website and ask to your browser to display certificate details to verify that the web site is using the certificate you installed:

• If you used CA-signed certificates the browser warning message disappears.
• If you used a self-signed certificate you still have the warning message. To remove the warning message from all browsers on you need to add the self-signed certificates to the trusted roots of your local computer. Refer to official Microsoft documentation related to your operating system to perform this action Manage Trusted Root Certificates.