Internet Explorer prompts to choose a certificate when browsing to the Qlik sense

[PadmaPriya]

Issue:

Internet Explorer prompts to choose a certificate when browsing to the Qlik sense

Environment:

• Microsoft Internet Explorer—all supported versions

Problem:

When you browse to the Qlik sense console, Internet Explorer prompts for a certificate when no certificates are present in the browser. It also prompts when only one certificate is present. This situation can cause confusion when an empty list of certificates is presented to the user.

Internet Explorer 8 and above versions correctly prompts for a certificate when only one certificate is present in the browser. But this improvement in design can also cause confusion.
 

Internet Explorer displays the following error when you browse to the Qlik sense console:

 
There is a problem with this website's security certificate. 

The security certificate presented by this website was not issued by a trusted certificate authority.
The security certificate presented by this website was issued for a different website's address. 
 Security certificate problems may indicate an attempt to fool you or intercept any data you send to the server.  

• We recommend that you close this webpage and do not continue to this website.  
• Click here to close this webpage.  
• Continue to this website (not recommended).

Solution:

Take the following actions:

1. Add the Qlik sense server to the list of sites for the Local intranet or Trusted sites zones.
2. Disable the prompt on the zone that contains the Qlik sense server:
1. Open Internet Explorer.
2. Click Tools, Internet Options.
3. Click the Security tab and select the zone.
4. Click Custom level for the zone that contains the Qlik sense server.
5. Make the following change:
• For Internet Explorer 8: Select the option Don’t prompt for client certificate selection when only one certificate exists.
• For Internet Explorer 7: Select the option Don't prompt for client certificate when no or only one exist.

​NOTE: The following applies when a prompt is not displayed, and only one certificate is present. Any site that requests client authentication can view the details about the certificate. If this option is enabled for non-trusted sites, it can lead to a privacy breach.

1. Disable the prompt (Internet Explorer 7 and later):
1. Open Internet Explorer.
2. Click Tools, Internet Options.
3. Click the Security tab, and configure a custom level for the following zones:
• Internet
• Local intranet
• Trusted sites
• Restricted sites zones.

NOTES:

• By default, sites within the Local intranet do not prompt for a certificate unless more than one certificate is present within the browser.
• The exception is Internet Explorer 7 and later. The default is to prompt when there are no certificates or only one certificate present.