Skip to main content
cancel
Showing results for 
Search instead for 
Did you mean: 
christopherkramer
Partner - Contributor III
Partner - Contributor III

Make Qlik monitor and status endpoint use HTTPS

We have a Qlik Sense Enterprise on Windows setup in an environment where no open HTTP endpoints are allowed. We setup an HTTPS certificate in QMC and made sure HTTP is disabled in the proxy. Unfortunately we discovered that two HTTP endpoints remain open without encryption:

http://hostname:4444/status 
http://hostname:5252/monitor 

How can we make those two endpoints use HTTPS?

Labels (3)
1 Solution

Accepted Solutions
Niroopananda
Support
Support

@christopherkramer 

Unfortunately port 4444 cannot be used on HTTPS because,

"REPOSITORY_SETUP_SERVICE. Exposes endpoints for installing certificates in the rim node. Uses HTTP.

REPOSITORY_STATUS_SERVICE. Exposes endpoints for returning the current status of the node (Initializing, CertificatesNotInstalled, Running). Uses HTTP. "

And port 5252 will use HPPTS.  Qlik will not make any changes and by default it will use the standard configurations. Please check with your internal IT team if there are any hardcoded things done on the server or any other settings made.

 

View solution in original post

3 Replies
Niroopananda
Support
Support

Hi @christopherkramer 

These are the ports which communicate internally and are encrypted with the self signed certificates.

christopherkramer
Partner - Contributor III
Partner - Contributor III
Author

Thanks for your reply. Unfortunately, company policies from our customer state that no process may open a port that allows HTTP communication. We are also not allowed to just block these ports using a firewall. What exactly are these ports used for? Is there a way to disable the services that open these ports?

Niroopananda
Support
Support

@christopherkramer 

Unfortunately port 4444 cannot be used on HTTPS because,

"REPOSITORY_SETUP_SERVICE. Exposes endpoints for installing certificates in the rim node. Uses HTTP.

REPOSITORY_STATUS_SERVICE. Exposes endpoints for returning the current status of the node (Initializing, CertificatesNotInstalled, Running). Uses HTTP. "

And port 5252 will use HPPTS.  Qlik will not make any changes and by default it will use the standard configurations. Please check with your internal IT team if there are any hardcoded things done on the server or any other settings made.