About QLIK SENSE 13.102.5 Security Report

[LiangKuo]

After installing QLIK SENSE 13.102.5, after vulnerability scanning, it was found that 5929 and 9090PORT have weak password messages. How to solve it?

p.s https://help.qlik.com/en-US/sense-admin/February2024/Subsystems/DeployAdministerQSE/Content/Sense_De...

I tried this article with the same result

[mpc]

Hi, 

Can you try to run https://www.nartac.com/Products/IISCrypto, rebout the server and launch a scan again ? 

Kind regards

[LiangKuo]

This is the IIS_CRYPTO setting, but the installation status is still the same, 9090, 5929PORT, ssl-weak-message-authentication-code-algorithms situation occurs。

[mpc · Accepted solution]

Hi, 

Can you try this one too ? https://community.qlik.com/t5/Official-Support-Articles/Disabling-Weak-Cipher-suites-for-TLS-1-2-on-...

If not ok, can you try to recreate the certificates with the bootstrap mode ? 
If not ok, then you might contact the support team