IBM QRadar SOAR

IBM QRadar SOAR

Join this online user group to communicate across Security product users and IBM experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.

 View Only

  • 1.  Certificate path for IBM Qradar Functions for SOAR App

    Posted Mon April 11, 2022 06:21 AM
    Hello,
             I am installing Qradar functions for SOAR app in SOAR platform, I have inserted all the parameters into app.config i.e hostname, username and password etc. But I am confusing in Verify cert path. Can anyone tell me the exact file location for this certificate ? and any other config is required to connect this app from Qradar.

    ------------------------------
    Hafiz Tabish Imran Bilgrami
    ------------------------------


  • 2.  RE: Certificate path for IBM Qradar Functions for SOAR App

    Posted Fri May 13, 2022 08:41 AM
    Edited by Peter Jankovsky Fri May 13, 2022 08:44 AM

    Hi Hafiz, very the same for us. There is documentation on how to correctly configure it. Only one presentation where is a screenshot of their settings but when I do the same it doesn't work. I'm going to create a support case for it:)

    My settings which are working, but it's not secure = I disabled CA certs + verification:



    ------------------------------
    Peter Jankovsky
    ------------------------------

    Original Message


  • 3.  RE: Certificate path for IBM Qradar Functions for SOAR App

    Posted Fri May 13, 2022 11:04 AM
    YEEEEEEEEEEEEEEES, I done it....
    You have to place that CA bundle to the "app container" (not SOAR, and not HOST APP). And the easiest way is by WebGUI, you have to create a new file

    Then "save and push". Then back to app.config and change settings for certificates, then "save and push" and then again back to app.config and test and it's successful.


    ------------------------------
    Peter Jankovsky
    ------------------------------

    Original Message