Https hub access with green adress bar - Qlik Community

oxiofrt · ‎2017-12-22

Hi,

We are trying to spread access to the hub through httpS protocol.

For the moment, when trying to reach httpS://server/hub , users have a message indicating that website is not secured and that is not recommended to continue. Adress bar is turning red if we continue.

Is anyone able to provide us a clear procedure not to have this warning message, and to have a green adress bar ?

- we do not have further competencies about proxies or certificates (....)

- some procedure found in this forum result in a crash of the QMC (with no other way to proceed than to restore a VM)

Thank you so much for your help.

Franck

Anonymous · ‎2017-12-26

Hello, I solved this problem by simply enabling in the proxy qmc the enable enable http option and redirecting port 80 to 8081. I make my users connect via http by this port. It even solves the Ipad errors which was my main problem with the certificates.

oxiofrt · ‎2017-12-28

Thanks a lot for your answer.

Http is easy to achieve. The aim is to use httpS.

There may be something wrong because no one seems to be able to use this protocol.

In my case, I have to restore VM after trying to deal with it.

Installing/registering/ removing (...) certificates cause the QMC not to be accessible, even after a restore of its posgresql database.

If anyone can help about httpS

Le 26 déc. 2017 à 23:11, Ewerton Tavares <qcwebmaster@qlikview.com<mailto:qcwebmaster@qlikview.com>> a écrit :

herbert88 · ‎2018-01-02

Maybe this can help you

Certificate: How to

1- How to generate a random appid
2- How to generate a self signed certificate
3- How to convert certificate to PFX file
4- How to install a certificate
5- How to get certificate thumbprint (hash)
6- How to check all installed certificates with Powershell
7- How to bind a certificate to a port with command prompt
8- How to bind a certificate to a port with command Powershell

1- How to generate a random appid

https://www.guidgenerator.com/

Click on Generate !

2- How to generate a self signed certificate

http://www.selfsignedcertificate.com/
Download both .cert and .key files

3- How to convert certificate to PFX file

https://www.sslshopper.com/ssl-converter.html
Download your .key and .cert files, and select PFX/PKCS#12 as output format
Click on convert and download the result file

4- How to install a certificate

Simply double click on the PFX file and select the personal store

5- How to get certificate thumbprint (hash)

Right click on the certificate and go to Details > <All> > Thumbprint

6- How to check all installed certificates with Powershell

PS C:\Users\Administrator> netsh http show sslcert

SSL Certificate bindings:
-------------------------

    IP:port                 : 0.0.0.0:443
    Certificate Hash        : 3a384a3xxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
    Application ID          : {b2cb5c3b-2ddf-45b9-b3e7-46c651269994}
    Certificate Store Name : (null)
    Verify Client Certificate Revocation    : Enabled
    Verify Revocation Using Cached Client Certificate Only    : Disabled
    Usage Check    : Enabled
    Revocation Freshness Time : 0
    URL Retrieval Timeout   : 0
    Ctl Identifier          : (null)
    Ctl Store Name          : (null)
    DS Mapper Usage    : Disabled
    Negotiate Client Certificate    : Disabled

7- How to bind a certificate to a port with command prompt

c:> netsh http add sslcert ipport=0.0.0.0:4799 certhash=55ab2929fbd585ad3ad817f25aee025a51a2ffb5 appid={e23183e3-c874-467a-bd39-d110cd066f1f}

8- How to bind a certificate to a port with command Powershell

PS C:\Users\Administrator> netsh
netsh>http
netsh http>add sslcert ipport=0.0.0.0:4799 certhash=55ab2929fbdxxxxxxxxxxxxxxxxxx appid={e23183e3-xxxxxxxxxxxxxxxxxxxx}

SSL Certificate successfully added

netsh http>exit

pablolabbe · ‎2018-01-02

When applicable please mark the appropriate replies as CORRECT. This will help community members and Qlik Employees know which discussions have already been addressed and have a possible known solution. Please mark threads as HELPFUL if the provided solution is helpful to the problem, but does not necessarily solve the indicated problem. You can mark multiple threads as HELPFUL if you feel additional info is useful to others