IBM QRadar

IBM QRadar

Join this online user group to communicate across Security product users and IBM experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.

 View Only

  • 1.  Using a wildcard ssl certificate in IBM QRadar

    Posted Tue October 01, 2024 05:35 AM

    Hi all,

    I'm currently trying to install a wildcard ssl certificate in our IBM QRadar instance.

    When I copy the certificate to /etc/httpd/conf/certs/ and run /opt/qradar/ca/bin/install_qradar_ssl_cert.sh, the fqdn is automatically taken over by the system as Subject: CN/DNS, even though this is not stated in the certificate.

    When I try to install the certificate with the /opt/qradar/bin/install-ssl-cert.sh script, I get the following error:

    [install-ssl-cert.sh] ERROR: my.qradar.hostname.local is missing from /root/cert/wildcard_cert/wildcard.cer
    [install-ssl-cert.sh] ERROR: Certificate validation failed

    Are wildcard certificates generally not supported or is there another way?
    Unfortunately I could not find anything in the documentation.



    ------------------------------
    Philipp
    ------------------------------


  • 2.  RE: Using a wildcard ssl certificate in IBM QRadar

    Posted Tue October 01, 2024 06:03 AM

    Hello Phillip, 

    Is this FQDN part of your wildcard cretificate?

    openssl x509 -text -noout -subject -issuer -in /root/cert/wildcard_cert/wildcard.cer |tail -2

    Regards



    ------------------------------
    Comghall Morgan
    QRadar Support Architect
    IBM
    ------------------------------

    Original Message


  • 3.  RE: Using a wildcard ssl certificate in IBM QRadar

    Posted Tue October 01, 2024 06:19 AM

    Hallo Comghall,

    the FQDN of our system is not in the wildcard cretificate.

    Regards



    ------------------------------
    Philipp Hellmann
    ------------------------------

    Original Message


  • 4.  RE: Using a wildcard ssl certificate in IBM QRadar

    Posted Tue October 01, 2024 06:39 AM

    Hello,

    Apologies I meant to state the domain of the FQDN not the FQDN itself.
    The FQDN domain must match the FQDN of your console if you use a wildcard.

    Regards,



    ------------------------------
    Comghall Morgan
    QRadar Support Architect
    IBM
    ------------------------------

    Original Message


Related Content