STEP by STEP : Updating SSL Certificate in Qlik Sense

 

Step-by-Step: Updating SSL Certificate in Qlik Sense

---

📌 Before You Start

✅ Ensure:

• You have admin access to the server.

• The new certificate is issued correctly and includes:

  • Private key

  • Server FQDN in CN and/or SAN

  • "Server Authentication" key usage

• Certificate is in .PFX, .CER, or .PEM format.

• You backup the current working certificate and configuration.

---

🛠️ 1. Install the New Certificate in Windows Certificate Store

1. Open MMC (Microsoft Management Console):

   • Run mmc.exe

   • Go to File > Add/Remove Snap-in

   • Select Certificates, click Add

   • Choose Computer Account, then Local Computer, click Finish

2. In MMC:

   • Navigate to Certificates (Local Computer) > Personal > Certificates

   • Right-click > All Tasks > Import

   • Follow the wizard to import the new certificate

   • Make sure it's placed under Personal

✅ Double-click the certificate to confirm:

• The private key is present

• It's valid and trusted

• "Intended Purposes" includes Server Authentication

---

🛠️ 2. Note the Thumbprint of the New Certificate

1. In MMC, double-click your new certificate

2. Go to the Details tab

3. Find Thumbprint, copy it

4. Remove spaces and invisible characters (e.g., no leading U+200E)

---

🔄 3. Update Qlik Sense Proxy Configuration (QMC)

1. Open the Qlik Management Console (QMC)
   URL: https://<your-server>/qmc

2. Go to: Proxies > select your proxy

3. Under Security, find:

   • SSL browser certificate thumbprint

   • Paste the new thumbprint from your new certificate

4. Click Apply and restart the Qlik Sense Proxy Service

---

🚀 4. Restart Qlik Sense Proxy Service

• Open Services.msc

• Find Qlik Sense Proxy Service

• Right-click > Restart

Or from PowerShell:

Restart-Service "Qlik Sense Proxy Service"

---

🔎 5. Validate the Certificate Is Applied

1. Open a browser

2. Navigate to: https://<your-qlik-server>

3. Click the padlock > View Certificate

4. Confirm it's showing the new certificate details

---

🧯 Optional: Clean Up Old Certificate (After Validation)

• In MMC, you can remove the old certificate if no longer needed.

• Make sure no other services depend on it (IIS, other apps).