IBM Security QRadar SOAR

 View Only
  • 1.  Certificate path for IBM Qradar Functions for SOAR App

    Posted Mon April 11, 2022 06:21 AM
    Hello,
             I am installing Qradar functions for SOAR app in SOAR platform, I have inserted all the parameters into app.config i.e hostname, username and password etc. But I am confusing in Verify cert path. Can anyone tell me the exact file location for this certificate ? and any other config is required to connect this app from Qradar.

    ------------------------------
    Hafiz Tabish Imran Bilgrami
    ------------------------------


  • 2.  RE: Certificate path for IBM Qradar Functions for SOAR App

    Posted 13 days ago
    Edited by Peter Jankovsky 13 days ago

    Hi Hafiz, very the same for us. There is documentation on how to correctly configure it. Only one presentation where is a screenshot of their settings but when I do the same it doesn't work. I'm going to create a support case for it:)

    My settings which are working, but it's not secure = I disabled CA certs + verification:



    ------------------------------
    Peter Jankovsky
    ------------------------------



  • 3.  RE: Certificate path for IBM Qradar Functions for SOAR App

    Posted 13 days ago
    YEEEEEEEEEEEEEEES, I done it....
    You have to place that CA bundle to the "app container" (not SOAR, and not HOST APP). And the easiest way is by WebGUI, you have to create a new file

    Then "save and push". Then back to app.config and change settings for certificates, then "save and push" and then again back to app.config and test and it's successful.


    ------------------------------
    Peter Jankovsky
    ------------------------------