Site not secure

[Mahamed_Qlik]

Hi

I am getting Site not secure in web browser.

I have checked the certificates expiry on server and its not expired. also same thumbprint has been provided under QMC for proxy security section.

[Mahamed_Qlik]

System proxy log :

"An unknown error occurred while processing the certificate↵↓A call to SSPI failed, see inner exception"

Security proxy log:

Couldn't find a valid ssl certificate with thumbprint xxxxxxxxxxxxxxxxxxxxxxxxxxx
Reverting to default Qlik Sense SSLCertificate
Set certificate 'CN=xx.xx.com

[Benoit_C · Accepted solution]

The error "Couldn't find a valid ssl certificate with thumbprint" would mean that your custom certificate is not valid.
 

I recommend you to check the 2 below articles:
 

https://community.qlik.com/t5/Official-Support-Articles/Couldn-t-find-a-valid-ssl-certificate-with-t...
 

https://community.qlik.com/t5/Official-Support-Articles/Qlik-Sense-Enterprise-on-Windows-Compatibili...
 

Regards,
Benoit

[Mahamed_Qlik]

Hi Benoit,

If you are saying it is not valid then how it showing as secure while accessing hub in qlik server?

[Benoit_C]

Hi Mahamed,

Maybe because it reverts to the Qlik self signed certificate.

Regards,
Benoit

[Mahamed_Qlik]

Hi Benoit,

I resolved it by using correct server name instead of using server alias name.

Now I am able to see secured site on my client machine.

But, this is resolved on my client machine only, other client machine is still showing insecure site, any idea on this?

[Benoit_C]

Hello Mahamed,

It's having the insecure error on other machine using the correct server name ?

When you are looking at the certificate used in the browser (from the client machine where now it's working), is that the self signed Qlik certificate ?

[Mahamed_Qlik]

Ok. Let me explain it more clearly:

1) Before using correct server name instead of using server alias name-

    - On every client machine certificate was showing as invalid.

    - On server it was showing as valid certificate.

2) After using correct server name instead of using server alias name
     - Some of the client machine is showing valid certificate and some of them still showing invalid certificate.

     - On server it is showing valid certificate.

Hopefully it is more simple and clear for you?

Note- Now highlighted part is the issue.

[Benoit_C]

So, for working and no working users, if you check in the browser the certificate, is that the same ?