1. If you have enabled windows authentication chances are that when you logout you will re-directed back to the Hub and then also logged back in again. This makes more sense if you have a custom authentication mechanism set up, i.e not using windows authentication.
2. When Qlik Sense is installed it will generate a self-signed certificate for the host you entered during installation. Now some browsers will warn you about self-signed certificates or if you are using a different host/url then the one you supplied during installation there will be a mismatch between the url and the certificate.
You can either turn off https and only rely on http in QMC or you could supply a valid certificate for the server, for example if you have a corporate SSL that is signed by a third party.
3. The whitelist does not control every single client, it will check the origin header in the http request and match that against the whitelist. So you don't need to add individual IP address here but only the IPs/hostnames of the servers that is accessing the engine over websockets, typically your servers ip/hostname.
