
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Qlik Sense: Problem with Security Certificate, Connection is untrusted
Jan 11, 2023 9:43:15 AM
Mar 16, 2016 12:17:26 AM
Accessing the Qlik Sense Enterprise on Windows hub or Management Console with HTTPS leads to a number of different browser errors (depending on browser vendor):
There is a problem with this website's security certificate.
Problem with security certificate or connection is untrusted.
Your connection is not private.
NEST::ERR_CERT_AUTHORITY_INVALID
When selecting Continue.... the page will display with a red cross in its URL bar and the error:
Certificate error
Environment:
Qlik Sense Enterprise on Windows
The client's web browser does not consider the certificate provided by the server to be trusted.
By default, Qlik Sense Enterprise on Windows is installed with a server-side self-signed certificate. These are not trusted by clients and the error is to be expected.
Resolution
Use the correct URL
- Do not use the IP address of the server. The certificate is assigned to the hostname.
- Are you using an alias of the server name? Use the correct name.
Progress without action
- You can proceed without taking further action (not recommended)
Obtain and install a trusted certificate
- Obtain a valid Signed Server Certificate matching the Proxy node URL, from a trusted Certificate Authority (such as VeriSign, GlobalSign or trusted Enterprise CA) or your corporate certificate authority. See Qlik Sense: Compatibility information for third-party SSL certificates to use with HUB/QMC for requirements.
- Install the certificate as documented in Qlik Sense Hub and QMC with a custom SSL certificate.
Note: This still requires that the root certificate is installed locally on all clients. With trusted Certificate Authorities, this is usually the case by default.
Import the root certificate on all local clients.
Don't have a certificate by a trusted Certificate Authority? You will need to import the certificate on all local clients.
This can be achieved using a Group Policy, see Distribute Certificates to Client Computers by Using Group Policy
Related Content
Identifying Qlik Sense root CA and server certificates in certificate store
Qlik Sense: Compatibility information for third-party SSL certificates to use with HUB/QMC
Qlik Sense Mobile on iOS: cannot open apps on the HUB
Qlik Sense: Trust a self-signed certificate on the client


- Mark as Read
- Mark as New
- Bookmark
- Permalink
- Report Inappropriate Content
Hi Andre,
We have imported the root certificate on server machine and in server machine browser it is showing secured
site well.
but on every client machine it is showing insecure and invalid certificate.
We have followed step given in above URL but still it is showing invalid certificate.

- Mark as Read
- Mark as New
- Bookmark
- Permalink
- Report Inappropriate Content
Hello @Mahamed_Qlik
Are you attempting to set a third-party certificate as the certificate used by the Qlik Sense proxy? In this case, please follow the instructions as per How to change the certificate used by the Qlik Sense Proxy to a custom third party certificate. The article includes additional troubleshooting steps to verify that the correct certificate is used.
All the best,
Sonja

- Mark as Read
- Mark as New
- Bookmark
- Permalink
- Report Inappropriate Content
Hi @Andre_Sostizzo Facing same issue. NET::ERR_CERT_COMMON_NAME_INVALID - able to see from developer tool. Any suggestion please. I tried all aspects. Something I missing I'm not sure which one.

- Mark as Read
- Mark as New
- Bookmark
- Permalink
- Report Inappropriate Content
Hello @balajibc64
As I noted in another post of yours, you are trying to set up Qlik Nprinting on demand. Please post about your issue in detail in the Qlik NPrinting forum.
Include:
- The version of the product
- What you are attempting to do
- What steps you performed
- Where the steps fail and where you are seeing errors
Feel free to tag me in the post.
All the best,
Sonja

- Mark as Read
- Mark as New
- Bookmark
- Permalink
- Report Inappropriate Content
Hi @Sonja_Bauernfeind Thanks. Sure I will.

- Mark as Read
- Mark as New
- Bookmark
- Permalink
- Report Inappropriate Content
Wild card Certificate : For one of customer the server is setup on .XXX.de domain and wild card certificate is installed using *.xyz.de domain. Now when I am applying the thumbprint in Virtual proxy and even allow host list certificate is not working ; logs is also not showing any thing much. How I can debug further ?

- Mark as Read
- Mark as New
- Bookmark
- Permalink
- Report Inappropriate Content
Hello @jaishree_Qlik
Please post about the issue in the Qlik Sense Deployment forum and include the following information:
- What version are you using?
- What is the error you are seeing on the front end?
- What do you mean with "even allow host list certificate" is not working?
- What have you found in the log files? Such as C:\ProgramData\Qlik\Sense\Log\Proxy\Trace and open the Security
All the best,
Sonja