QlikView Enterprise Solutions

Enable SSL QlikView Web Server

Version: 2.1
Date: 2013-08-20
Author(s) CAC

A best practice is a technique or methodology that, through experience and

research, has proven to reliably lead to a desired result.
Contents
Contents 2

Introduction 3

File Manifest SSLQVWS.7z 3

SSL-Certificate creation 4
Configure Powershell 4

Import the certificate to QV WebServer 7

Pre-requisite steps 11
Generate the Thumbprint 11
Bind http to SSL using netsh 12

Configure QlikView Webserver 13

Introduction
This document outlines the configuration required to enable Secure Socket Layer
(SSL) security on QlikView Webserver.

File Manifest SSLQVWS.7z

Enable SSL on QlikView This document
webserver.docx
Makecert.ps1 Powershell script to create self signed
certificate
GUIDGEN.exe Microsoft utility to create GUIDS

[3]
SSL-Certificate creation
An SSL certificate can be created using the provided powershell script
(makecert.ps1)

Configure Powershell

1. Launch Powershell with elevated privilages

2. Check the execution policy (shoule be RemoteSigned or greater)

Get-ExecutionPolicy (take note of the original setting)
If the result of this is Restricted
Set-ExecutionPolicy remotesigned

3. Execute makecert.ps1
a. Ensure the subject is the NETBIOS or FQDN of the server that will
host QlikView Webserver
b. Do not install the certificate in the Trusted Root

4. Set Powershell back to the original ExecutionPolicy

5. Launch an elevated Microsoft Management Console (MMC)

[4]
6. Add the certificates snap-in > Local Computer Account

7. Expand Certificates > Personal > Certificates

a. Check the certificate exists in the Certificates folder

8. If steps One through six were performed on the server that will host
QlikView webserver the following steps can be ignored, please go to the
section
9. Right Click on the certificate > All Tasks > Export
a. Only do the export if the certificate was created on another
machine (other than the QlikView webserver)
10. Ensure the certificate will be exported as a PFX and click Next

[5]
11. Enter a password for the private key

12. Save the certificate and click Next

[6]
13. Review the information and click finish

[7]
Import the certificate to QV WebServer
1. Copy the certificate to the Server that will host QlikView websever
2. Launch an elevated Microsoft Management Console (MMC)

3. Add the certificates snap-in > Local Computer Account

4. Expand Certificates > Personal > Certificates

5. Right Click > All Tasks > import

6. Click Next

[8]
7. Browse to the certificate then click next

8. Type the password that was created when the certificate was created and
click next

[9]
9. Import the certificate in the personal store and click next

10. Review the information and click Finish

[10]
[11]
Pre-requisite steps
Generate the Thumbprint
1. From the MMC console double click on the certificate in the Personal store
> select the details Tab and scroll down to thumbprint

2. Copy the thumbprint into Notepad > Find/Replace <space> replace with
<no spaces>
a. Example 21 7b 64 d2 3a should become 217b64d23a
3. Download Guidgen.exe from Microsoft to generate a unique GUID
a. http://www.microsoft.com/en-au/download/details.aspx?id=17252
4. Execute Guidgen.exe
a. Create a registry format GUID

[12]
 b. Copy the GUID to Notepad

Bind http to SSL using netsh

1. Launch command prompt
2. Enter the following
netsh http add sslcert ipport=0.0.0.0:443
certhash=0000000000003ed9cd0c315bbb6dc1c08da5e6
appid={00112233-4455-6677-8899-AABBCCDDEEFF}
a. ipport parameter specifies the IP address and port (ensure the
ipport = 0.0.0.0 (do not replace with the actual IP Address)
b. certhash parameter specifies the thumbprint of the certificate
(previously copied to notepad).
c. appid parameter is the GUID (previously copied to notepad)

[13]
Configure QlikView Webserver
1. Browse to QlikView Management Console

2. Set the Port to 443

3. Check the box labeled Use https
4. Restart the QlikView webserver service

[14]