Make Qlik monitor and status endpoint use HTTPS

[christopherkramer]

We have a Qlik Sense Enterprise on Windows setup in an environment where no open HTTP endpoints are allowed. We setup an HTTPS certificate in QMC and made sure HTTP is disabled in the proxy. Unfortunately we discovered that two HTTP endpoints remain open without encryption:

http://hostname:4444/status 
http://hostname:5252/monitor 

How can we make those two endpoints use HTTPS?

[Niroopananda]

Hi @christopherkramer 

These are the ports which communicate internally and are encrypted with the self signed certificates.

[christopherkramer]

Thanks for your reply. Unfortunately, company policies from our customer state that no process may open a port that allows HTTP communication. We are also not allowed to just block these ports using a firewall. What exactly are these ports used for? Is there a way to disable the services that open these ports?

[Niroopananda · Accepted solution]

@christopherkramer 

Unfortunately port 4444 cannot be used on HTTPS because,

"REPOSITORY_SETUP_SERVICE. Exposes endpoints for installing certificates in the rim node. Uses HTTP.

REPOSITORY_STATUS_SERVICE. Exposes endpoints for returning the current status of the node (Initializing, CertificatesNotInstalled, Running). Uses HTTP. "

And port 5252 will use HPPTS.  Qlik will not make any changes and by default it will use the standard configurations. Please check with your internal IT team if there are any hardcoded things done on the server or any other settings made.