SSL cert revoked

[Lauri]

We recently migrated QS to a new server and domain. It's running QS Feb 2024 r6. We installed a GoDaddy SSL cert, and everything was working fine. This morning, my browser said that the cert is revoked. GoDaddy's website shows that to be true. (In that situation, you can't bypass the warning and log in, so it's BAD.)

The only changes to the server yesterday:

1. I added an encryption key to Qlik for a SharePoint connector (using QvWebStorageProviderConnectorPackage.exe).

2. Windows installed security updates to the Microsoft Access Database driver.

I've uninstalled the security updates, and now my browser (on the network with Qlik) shows a valid cert and I can get into Qlik, but not from any other location! Not even on the Qlik server itself. 

What is going on??

[Lauri]

I walked away for an hour and now my workstation also shows NET::ERR_CERT_REVOKED, like every other computer. 

[Levi_Turner]

For the Qlik side, you can delete the certificate from MMC and restart services. At that point, Qlik will initialize, try to find a certificate with a specified thumbprint, fail to find the certificate, and fall back to the self-generated certificates. That will get you back into the QMC.

As for what is going on, that's a conversation to have with the vendor who provided you the certificate. Qlik Sense only _uses_ the certificate, we don't verify / validate.

[alpha_mann · Accepted solution]

It seems you're facing issues with your GoDaddy SSL certificate being revoked, causing accessibility problems with Qlik Sense on your server. After adding an encryption key for a SharePoint connector and uninstalling recent Microsoft Access Database driver updates, you've encountered inconsistent access across different locations. To resolve this, ensure the SSL certificate is correctly installed and not revoked, clear browser caches, restart relevant services, check firewall settings, and review server logs for errors. Testing from various networks can also help identify network-specific issues. If problems persist, consider contacting Qlik support for specialized assistance, or else you can read this one https://cheapsslweb.com/blog/how-to-fix-neterr-cert-revoked-error/

Hope this will help you 🙂 Cheers!

[Lauri]

Thank you for the guidance. GoDaddy said there's a 3rd party system out there that scans certificates for problems that can lead to revocation. GoDaddy said ours was revoked because we weren't forcing HTTP to HTTPS. This is true, but we also don't allow HTTP traffic at all so we didn't think that'd be necessary. 

@Levi_Turner 's recommendation to remove the cert from the server's cert store is excellent. At least that way you can get back into Qlik. 

Once we locked down our firewall (deny all except a whitelist of IPs), and reinstalled the cert, we were fine.