Connection is not secure message on login screen

[Maxime_Ponomarenko]

Hello everybody. Please advice some strange moment. We use certificate from our corporate CA, when users open first URL it shows hat connection is not secure despite of HTTPS:

After successful logon browser shows normal message - connection is secure. How to fix it?

[Sebastian_Linser]

Hello @Maxime_Ponomarenko assuming you did add the 3rd party proxy certificate thumbprint in QMC and restarted Qlik Sense.

What do you see in the Proxy logs, could the certificate be mapped correctly

If you server is called servername.domain.local, and you open it just from https://servername it will be not trusted because this one would have to be in the subject alternative name collumn as well.

It will be the same with https://localhost for that matter. Have you tried to switch of the Qlik Sense Proxy to see if there is a second webserver in front?

to dig deeper you need to check into the certificate itself you need to check the certificate path, if its e.g. the Qlik Sense Selfsigned or your 3rd party cert it had applied at this two times.

If you would have port 80 enabled on that proxy you will see the same

by using http://servername.domain.local (or as above http://qlikserver1.domain.local) and as in your case without the possibility to see any certificate.

[Maxime_Ponomarenko]

Thanks for reply. I've checked certificate and it is the correct one. When i enter username and password, i can see normal message - certificate is OK and connection is secured. It is the problem with this page and popup window for login and password. I've changed authentication method from "Windows" to "Form" in virtual proxy settings and now it is OK - i have to enter login and password not in popup windows but inside browser. For me problem is fixed, but it is interesting to know, what is the problem with my original situation?

[Sebastian_Linser]

Did you have any additional header applied on the virtual proxy and is port 80 enabled in the proxy of that node?

[Maxime_Ponomarenko]

Hello, thank you for your help. There is no any additional header on virtual proxy and port 80 is enabled in proxy settings, i have only one proxy - default one.