IBM QRadar

 View Only

 Threat Intelligence Authentication token not being accepted

Jáchym Málek's profile image
Jáchym Málek posted Thu April 16, 2026 07:20 AM

I wanted to setup taxii threat inteligence feed from OpenCTI,but when i accesed the threat inteligence app i was presented with this modal,which persists even after i provide the token in settings(i followed Configuring the authorization token

Ibm remove preview
Configuring the authorization token
Before you use the IBM QRadar Threat Intelligence dashboard, you must create an authentication token.
View this on Ibm >

)and saved it(i even got succes popup).This issue persists even after refreshing page,clearing cache,redeploying and reinstalling whole app.Has anyone encountred anything simmilar and was ablet o fix it?

Jashin Kumar's profile image
Jashin Kumar posted Fri April 17, 2026 03:23 AM

Hello Jachym Malek,

This issue can occur if the self-signed SSL root and intermediate certificates are not present in the anchors directory on the Console or App Host, which prevents proper certificate validation.

Please check the following directory for the required certificates. If they are not present, copy the root and intermediate certificates to this location:

























ls -lrth /etc/pki/ca-trust/source/anchors/

After adding the certificates, run the following commands:

























update-ca-trust
systemctl restart podman

If issue still persist, Please check app.log of the threat intell app

Related Content