Skip to main content
Announcements
Have questions about Qlik Connect? Join us live on April 10th, at 11 AM ET: SIGN UP NOW
cancel
Showing results for 
Search instead for 
Did you mean: 
hsv_vijay
Partner - Contributor
Partner - Contributor

Qlik sense - SSL certificate installation

Hi,

Need help in installing the SSL certificate installation on a Qlik sense server.

Ex:

1. We have a domain <abc.com>. Qlik server  is installed on an AWS EC2 instance with hostname as "qlikserver". So, my server would be "qlikserver.abc.com".

2. The users will be able to access the hub using "https://qserv.abc.com/hub". The name "qserv" is mapped to "qlikserver" (DNS mapping)

Here, my doubt is that if the CSR (Certificate signing request) is generated to "qserv.abc.com" and in turn the certificate is generated on this  name. Will the users be able to use the previous link without any issues (meaning, without any warning message while connecting to hub).

Please suggest if this is the correct way or am I missing anything here

Note: I am aware of the Warning message which we get while the SSL certificates are not installed.

Thanks in Advance

2 Replies
Levi_Turner
Employee
Employee

Modern web browsers validate whether a SSL certificate is "valid" by using a number of factors, but for this purpose the primary one is the DNS Name elements(s) in the Subject Alternative Name attribute. Let's take this certificate which was presented on www.google.com:

123.png

 

This same certificate would be considered valid on example.google.com and example.android.com. There are a ton of those for that certificate, but this points to the ultimate route you'll want to take. With the DNS Name attribute, if you want coverage for server.company.com and alias.company.com then you'd want to have each of those listed as DNS Names in the CSR. Alternatively you may be able to request a wildcard certificate (*.company.com) which will accomplish the same goal. Wildcard certificates can be frowned upon by many organizations, so inquire with the CA you're working with whether that request would be considered acceptable.

hsv_vijay
Partner - Contributor
Partner - Contributor
Author

Hi,

Thanks for the reply. I will try it and update on the same thread

 

Regards,
Sai