Skip to main content

Backing up certificates

When you install Qlik Sense, you should create a backup of the certificates on the central node.

Do the following:

  1. Open a command prompt, and launch the Microsoft Management Console (mmc) as the user that runs the Qlik Sense services.
  2. Select File>Add/Remove Snap-in.
  3. Double-click Certificates.
  4. Select Computer account and click Next.
  5. Select Local computer and click Finish.
  6. Double-click Certificates.
  7. Select My user account and click Finish.
  8. Click OK.
  9. Expand Certificates (Local Computer) in the left panel.
  10. Expand the Trusted Root Certification Authorities folder and select the Certificates folder.
  11. Right-click the certificate that is Certificate Authority (CA) for all nodes in the Qlik Sense site and select All Tasks>Export. The CA is named <computer_that_issued_the_certificate>-CA by default.
  12. Click Next.
  13. Select Yes, export the private key and click Next.
  14. Select Personal Information Exchange.
  15. Tick the Export all extended properties box and then click Next.
  16. Enter and confirm a password. Then click Next.
  17. The password is needed when importing the certificate.

  18. Enter a file name for the .pfx file and click Next.
  19. Tip noteIt is recommended to include the server name in the file name to avoid confusion with other certificate files.

  20. Click Finish.
  21. The .pfx file that contains the CA for all nodes in the Qlik Sense site is stored in the selected location.

  22. Starting at step 11, repeat the procedure and export the server certificate (that is, the SSL certificate), which is located under Certificates (Local Computer)>Personal>Certificates. The server certificate a) has the same name as the Domain Name System (DNS) name of the machine, and b) is signed by the CA for all nodes in the site.
  23. Starting at step 11, repeat the procedure and export the client certificate (that is, the ID of the client), which is located under Certificates - Current User>Personal>Certificates. The client certificate is named QlikClient and is signed by the CA for all nodes in the site.
  24. Close the MMC console.
  25. No changes need to be saved.

Did this page help you?

If you find any issues with this page or its content – a typo, a missing step, or a technical error – let us know how we can improve!