Qlik Sense: Problem with Security Certificate, Connection is untrusted

[Andre_Sostizzo]

Accessing the Qlik Sense Enterprise on Windows hub or Management Console with HTTPS leads to a number of different browser errors (depending on browser vendor):

There is a problem with this website's security certificate. 

Problem with security certificate or connection is untrusted. 

Your connection is not private.

NEST::ERR_CERT_AUTHORITY_INVALID

 

When selecting Continue.... the page will display with a red cross in its URL bar and the error:

Certificate error

Environment:

Qlik Sense Enterprise on Windows 

 

The client's web browser does not consider the certificate provided by the server to be trusted.

By default, Qlik Sense Enterprise on Windows is installed with a server-side self-signed certificate. These are not trusted by clients and the error is to be expected. 

Resolution

Use the correct URL

1. Do not use the IP address of the server. The certificate is assigned to the hostname.
2. Are you using an alias of the server name? Use the correct name.

Progress without action

1. You can proceed without taking further action (not recommended)

Obtain and install a trusted certificate

1. Obtain a valid Signed Server Certificate matching the Proxy node URL, from a trusted Certificate Authority (such as VeriSign, GlobalSign or trusted Enterprise CA) or your corporate certificate authority.  See Qlik Sense: Compatibility information for third-party SSL certificates to use with HUB/QMC for requirements. 
2. Install the certificate as documented in Qlik Sense Hub and QMC with a custom SSL certificate.

Note: This still requires that the root certificate is installed locally on all clients. With trusted Certificate Authorities, this is usually the case by default. 

Import the root certificate on all local clients.

Don't have a certificate by a trusted Certificate Authority? You will need to import the certificate on all local clients.

This can be achieved using a Group Policy, see Distribute Certificates to Client Computers by Using Group Policy

Related Content

Identifying Qlik Sense root CA and server certificates in certificate store  
Qlik Sense: Compatibility information for third-party SSL certificates to use with HUB/QMC 
Qlik Sense Mobile on iOS: cannot open apps on the HUB 
Qlik Sense: Trust a self-signed certificate on the client  

[Mahamed_Qlik]

Hi Andre,

We have imported the root certificate on server machine and in server machine browser it is showing secured 

site well.

but on every client machine it is showing insecure and invalid certificate.

We have followed step given in above URL but still it is showing invalid certificate.

[Sonja_Bauernfeind]

Hello @Mahamed_Qlik 

Are you attempting to set a third-party certificate as the certificate used by the Qlik Sense proxy? In this case, please follow the instructions as per How to change the certificate used by the Qlik Sense Proxy to a custom third party certificate. The article includes additional troubleshooting steps to verify that the correct certificate is used.

All the best,
Sonja 

[balajibc64]

Hi @Andre_Sostizzo Facing same issue. NET::ERR_CERT_COMMON_NAME_INVALID - able to see from developer tool. Any suggestion please. I tried all aspects. Something I missing I'm not sure which one. 

[Sonja_Bauernfeind]

Hello @balajibc64 

As I noted in another post of yours, you are trying to set up Qlik Nprinting on demand. Please post about your issue in detail in the Qlik NPrinting forum.

Include:

• The version of the product
• What you are attempting to do
• What steps you performed
• Where the steps fail and where you are seeing errors

Feel free to tag me in the post. 

All the best,
Sonja 

[balajibc64]

Hi @Sonja_Bauernfeind Thanks. Sure I will. 

[jaishree_Qlik]

Wild card Certificate : For one of customer  the server is setup on  .XXX.de domain and wild card certificate is installed using *.xyz.de domain. Now when I am applying the thumbprint in Virtual proxy and even allow host list certificate is not working ; logs is also not showing any thing much. How I can debug further ?

[Sonja_Bauernfeind]

Hello @jaishree_Qlik 

Please post about the issue in the Qlik Sense Deployment forum and include the following information:

• What version are you using?
• What is the error you are seeing on the front end? 
• What do you mean with "even allow host list certificate" is not working?
• What have you found in the log files? Such as  C:\ProgramData\Qlik\Sense\Log\Proxy\Trace and open the Security

All the best,
Sonja