IBM Security QRadar SOAR

 View Only
Expand all | Collapse all

Certificate path for IBM Qradar Functions for SOAR App

  • 1.  Certificate path for IBM Qradar Functions for SOAR App

    Posted Mon April 11, 2022 06:21 AM
    Hello,
             I am installing Qradar functions for SOAR app in SOAR platform, I have inserted all the parameters into app.config i.e hostname, username and password etc. But I am confusing in Verify cert path. Can anyone tell me the exact file location for this certificate ? and any other config is required to connect this app from Qradar.

    ------------------------------
    Hafiz Tabish Imran Bilgrami
    ------------------------------


  • 2.  RE: Certificate path for IBM Qradar Functions for SOAR App

    Posted Fri May 13, 2022 08:41 AM
    Edited by Peter Jankovsky Fri May 13, 2022 08:44 AM

    Hi Hafiz, very the same for us. There is documentation on how to correctly configure it. Only one presentation where is a screenshot of their settings but when I do the same it doesn't work. I'm going to create a support case for it:)

    My settings which are working, but it's not secure = I disabled CA certs + verification:



    ------------------------------
    Peter Jankovsky
    ------------------------------



  • 3.  RE: Certificate path for IBM Qradar Functions for SOAR App

    Posted Fri May 13, 2022 11:04 AM
    YEEEEEEEEEEEEEEES, I done it....
    You have to place that CA bundle to the "app container" (not SOAR, and not HOST APP). And the easiest way is by WebGUI, you have to create a new file

    Then "save and push". Then back to app.config and change settings for certificates, then "save and push" and then again back to app.config and test and it's successful.


    ------------------------------
    Peter Jankovsky
    ------------------------------