topic Re: Use of Third Party SSLs over internal QlikSense Certs in Management & Governance

Use of Third Party SSLs over internal QlikSense Certs

Senor_Dai — Wed, 19 Feb 2025 12:10:54 GMT

Hi all, we have recently had a pen test against our QlikSense Servers.

One of the findings was the use of 'Self Signed Certificates'..

Ive run an openssl s_client -connect ourserver.com:4242 -showcerts command

and its come back with the ourserver.com-CA cert ....

We have a thirdparty SSL in use for external hub/qmc access - is there a way we can also use this SSL in place of the self signed cert?

Many thanks,

Senor Dai

Re: Use of Third Party SSLs over internal QlikSense Certs

Alan_Slaughter — Wed, 19 Feb 2025 12:17:58 GMT

Hi Senor_Dai, removing Qlik Sense generated certificates is not supported.

Re: Use of Third Party SSLs over internal QlikSense Certs

Senor_Dai — Wed, 19 Feb 2025 12:23:55 GMT

Hi @Alan_Slaughter ,

Thanks for the response. So, how do we resolve the PeTest finding?

Many thanks

Re: Use of Third Party SSLs over internal QlikSense Certs

Alan_Slaughter — Wed, 19 Feb 2025 12:30:28 GMT

I recommend the following articles and if you are still having issues I suggest opening a case with support.

https://community.qlik.com/t5/Official-Support-Articles/Qlik-Sense-Enterprise-on-Windows-Securing-and-Hardening-Server/ta-p/1712239

https://community.qlik.com/t5/Official-Support-Articles/Qlik-Sense-Generating-CSR-for-3rd-Party-Certificates/ta-p/1713936