STEP by STEP : Updating SSL Certificate in Qlik Sense

 

Step-by-Step: Updating SSL Certificate in Qlik Sense

---

📌 Before You Start

✅ Ensure:

• You have admin access to the server.

• The new certificate is issued correctly and includes:

  • Private key

  • Server FQDN in CN and/or SAN

  • "Server Authentication" key usage

• Certificate is in .PFX, .CER, or .PEM format.

• You backup the current working certificate and configuration.

---

🛠️ 1. Install the New Certificate in Windows Certificate Store

1. Open MMC (Microsoft Management Console):

   • Run mmc.exe

   • Go to File > Add/Remove Snap-in

   • Select Certificates, click Add

   • Choose Computer Account, then Local Computer, click Finish

2. In MMC:

   • Navigate to Certificates (Local Computer) > Personal > Certificates

   • Right-click > All Tasks > Import

   • Follow the wizard to import the new certificate

   • Make sure it's placed under Personal

✅ Double-click the certificate to confirm:

• The private key is present

• It's valid and trusted

• "Intended Purposes" includes Server Authentication

---

🛠️ 2. Note the Thumbprint of the New Certificate

1. In MMC, double-click your new certificate

2. Go to the Details tab

3. Find Thumbprint, copy it

4. Remove spaces and invisible characters (e.g., no leading U+200E)

---

🔄 3. Update Qlik Sense Proxy Configuration (QMC)

1. Open the Qlik Management Console (QMC)
   URL: https://<your-server>/qmc

2. Go to: Proxies > select your proxy

3. Under Security, find:

   • SSL browser certificate thumbprint

   • Paste the new thumbprint from your new certificate

4. Click Apply and restart the Qlik Sense Proxy Service

---

🚀 4. Restart Qlik Sense Proxy Service

• Open Services.msc

• Find Qlik Sense Proxy Service

• Right-click > Restart

Or from PowerShell:

Restart-Service "Qlik Sense Proxy Service"

---

🔎 5. Validate the Certificate Is Applied

1. Open a browser

2. Navigate to: https://<your-qlik-server>

3. Click the padlock > View Certificate

4. Confirm it's showing the new certificate details

---

🧯 Optional: Clean Up Old Certificate (After Validation)

• In MMC, you can remove the old certificate if no longer needed.

• Make sure no other services depend on it (IIS, other apps).

STEP by STEP : QlikSense Installation 2025

 

QLIKSENSE INSTALLATION 2025

Pre-Installation Checklist

Before you begin, ensure the following:

• System Requirements: Verify that your server meets the minimum hardware and software requirements for Qlik Sense Enterprise. This includes supported versions of Windows Server, sufficient RAM, CPU, and disk space.

• Microsoft .NET Framework: Ensure that .NET Framework 4.8 or higher is installed. If not, the Qlik Sense installer will prompt you to install it.

• User Accounts: Create the necessary user accounts on the server to run Qlik Sense services.

• File Share: Set up a file share accessible to the central node and any rim nodes in a multi-node setup. This will store Qlik application data.

• Antivirus Software: Be aware that antivirus software can impact performance. Ensure it's configured to minimize interference with Qlik Sense operations.

---

📥 Downloading the Installer

1. Access Qlik Product Downloads: Navigate to the Qlik Product Downloads 

2. Select Qlik Sense Enterprise: Choose Qlik Sense Enterprise on Windows.

3. Download the Installer: Select the appropriate version (e.g., May 2025) and download the installer file.

---

🛠️ Installation Steps

1. Run the Installer: Right-click the downloaded installer file and select Run as administrator.

2. License Agreement: Read and accept the Qlik User License Agreement.

3. Cluster Setup: On the "Create or join a cluster" screen, select Create cluster

4. Host Name: Enter the fully qualified domain name (FQDN) of your server.

5. Repository Database:

   • Create a new database: Enter a password for the database user and superuser.

   • Connect to an existing database: Provide the database hostname and user credentials.

6. Qlik Services:

   • Enter the username and password for the Qlik services.

   • Configure additional settings like database connection pool size and listening ports.

7. Object Bundles: Choose whether to install additional object bundles like Dashboard and Visualization bundles.

8. Installation: Click Install to begin the installation process.

9. Completion: Once installation is complete, you will see a success message.

---

🔄 Post-Installation Configuration

1. Start Qlik Sense Services: Ensure all Qlik Sense services are running.

2. Access Qlik Management Console (QMC): Open a browser and navigate to https://<your-server-name>/qmc.

3. License Qlik Sense: In the QMC, enter your Qlik Sense license key.

4. Configure Data Connections: Set up necessary data connections for your applications.

5. Deploy Applications: Upload and configure your Qlik Sense applications.

---

🔐 Security Considerations

• Domain Controller: Avoid installing Qlik Sense on a domain controller. It's not supported and can impact performance and security. 

• Firewall and Ports: Ensure that the necessary ports are open and not blocked by firewalls. Refer to the Qlik Sense ports documentation for details.

STEP by STEP : QlikSense Migration 2024

Qlik Sense Migration: Server-to-Server Steps (Qliksense 2024)

✅ Pre-Migration Planning

1. Document Existing Environment

   • Qlik Sense version

   • License key

   • Data connections

   • User directory connectors (UDCs)

   • Security rules

   • Certificates (for HTTPS)

   • Scheduler tasks

   • Custom extensions or widgets

2. Verify Both Servers

   • Make sure the target server has the same OS and Qlik Sense version as the source.

   • If not, install the same version on the target first.

   • Ensure both servers are fully patched and meet Qlik’s system requirements.

3. Backup the Source Server

   • Certificates (via Qlik Sense QMC or MMC)

   • PostgreSQL repository database (QSR)

   • Application files from:

     • C:\ProgramData\Qlik\Sense\Apps

     • C:\ProgramData\Qlik\Sense\Repository\Content

   • Custom connectors/extensions if any

   • Qlik Sense configuration files from C:\ProgramData\Qlik\Sense\Repository\Exported Certificates

---

🧰 Migration Process

1. Install Qlik Sense on Target Server

• Do a fresh install of the same version of Qlik Sense on the new server.

• Choose "Central node" and "Use existing certificates" (optional if restoring from backup).

2. Stop Services on Both Servers

• Stop all Qlik Sense services:

  QlikSenseRepositoryService
  QlikSenseEngineService
  QlikSenseSchedulerService
  QlikSenseProxyService
  QlikSenseServiceDispatcher
  QlikSensePrintingService
  

3. Copy the PostgreSQL Repository Database

• Backup using Qlik-provided tool or standard pgAdmin method:

  C:\Program Files\Qlik\Sense\Repository\PostgreSQL\<version>\bin\pg_dump.exe -U postgres -Fc QSR > QSR.backup
  

• Move the .backup file to the target server and restore it:

  pg_restore.exe -U postgres -d QSR -v QSR.backup
  

4. Transfer Certificates

• Export the certificates from the old server using QMC or MMC.

• Copy them to the same location on the new server:
  C:\ProgramData\Qlik\Sense\Repository\Exported Certificates\

5. Restore Application and Content Folders

• Copy contents of these folders to the same locations on the target server:

  • C:\ProgramData\Qlik\Sense\Apps

  • C:\ProgramData\Qlik\Sense\Repository\Content

  • Any custom folders used for extensions, connectors, etc.

6. Adjust Configuration Files

• Update hostnames and paths in:

  • Repository.exe.config

  • Scheduler.exe.config

  • Any custom configuration scripts

---

🔐 Post-Migration Tasks

1. Start Qlik Sense Services

   • Start all services in proper order or reboot the server.

2. Verify Services

   • Open the Qlik Management Console (QMC).

   • Check if all services are running, users are visible, and apps are accessible.

3. Reapply License

   • In QMC, re-enter the license if needed (particularly if MAC address has changed).

4. Reconfigure Data Connections (if needed)

   • Update paths if folder structures have changed.

5. Test Everything

   • Open apps via the Hub.

   • Validate reload tasks.

   • Test user access and security rules.

   • Run a few sample reloads and data connection tests.

6. DNS or Hostname Redirection

   • Update DNS to point to the new server IP (optional).

   • Or reassign the old hostname/IP to the new server.

Nprinting- (ver -16) Server Certificate Update Process

Certificate Update Process for QLIK Nprinting

Import the certificate to QV Nprinting Server

1. Copy the certificate to the Server that will host QlikView Nprinting Server(.pfx format)

2. Launch an elevated Microsoft Management Console (MMC)

3. Add the certificates snap-in > Local Computer Account

4. Expand Certificates > Personal > Certificates

5. Right Click > All Tasks > import

6. Click Next

7. Browse to the certificate then click next

8. Type the password that was created when the certificate was created and click next

9. Import the certificate in the personal store and click next

10.  Review the information and click Finish

Pre-requisite steps

Generate the Thumbprint

1. From the MMC console double click on the certificate in the Personal store > select the details Tab and scroll down to thumbprint

2. Copy the thumbprint into Notepad > Find/Replace <space> replace with <no spaces>

a.    Example 21 7b 64 d2 3a… should become 217b64d23a

3. Download Guidgen.exe from Microsoft to generate a unique GUID

a.    http://www.microsoft.com/en-au/download/details.aspx?id=17252

4. Execute Guidgen.exe

a.    Create a registry format GUID

b.    Copy the GUID to Notepad

 

Bind http to SSL using netsh

1. Stop Nprinting Services

2.Launch command prompt

    Enter the following:-

3. netsh http delete sslcert ipport= 0.0.0.0:9000
4. netsh http delete sslcert ipport= 0.0.0.0:9001

5. 

netsh http add sslcert ipport=0.0.0.0:9000 certhash=0000000000003ed9cd0c315bbb6dc1c08da5e6 appid={00112233-4455-6677-8899-AABBCCDDEEFF}

netsh http add sslcert ipport=0.0.0.0:9001 certhash=0000000000003ed9cd0c315bbb6dc1c08da5e6 appid={00112233-4455-6677-8899-AABBCCDDEEFF}

a.    ipport parameter specifies the IP address and port (ensure the ipport = 0.0.0.0 (do not replace with the actual IP Address)

b.    certhash parameter specifies the thumbprint of the certificate (previously copied to notepad).

c.    appid parameter is the GUID (previously copied to notepad)

6. Start Nprinting Services.