Use of Third Party SSLs over internal QlikSense Certs

[Senor_Dai]

Hi all,  we have recently had a pen test against our QlikSense Servers.

One of the findings was the use of 'Self Signed Certificates'..

Ive run an  openssl s_client -connect ourserver.com:4242 -showcerts command

and its come back with the ourserver.com-CA cert ....

We have a thirdparty SSL in use for external hub/qmc access - is there a way we can also use this SSL in place of the self signed cert?

Many thanks,

Senor Dai

[Alan_Slaughter]

Hi Senor_Dai, removing Qlik Sense generated certificates is not supported. 

[Senor_Dai]

Hi @Alan_Slaughter ,

Thanks for the response.   So, how do we resolve the PeTest finding?

Many thanks

[Alan_Slaughter]

I recommend the following articles and if you are still having issues I suggest opening a case with support. 

https://community.qlik.com/t5/Official-Support-Articles/Qlik-Sense-Enterprise-on-Windows-Securing-an...

https://community.qlik.com/t5/Official-Support-Articles/Qlik-Sense-Generating-CSR-for-3rd-Party-Cert...