{"id":1774,"date":"2026-05-29T06:41:39","date_gmt":"2026-05-29T06:41:39","guid":{"rendered":"https:\/\/craftcookcode.com\/?p=1774"},"modified":"2026-05-29T06:41:41","modified_gmt":"2026-05-29T06:41:41","slug":"qlik-enterprise-manager-broken-ssl-and-mothers-day-is-ruined","status":"publish","type":"post","link":"https:\/\/craftcookcode.com\/?p=1774","title":{"rendered":"Qlik Enterprise Manager: Broken SSL and Mother&#8217;s day is ruined"},"content":{"rendered":"\n<p class=\"wp-block-paragraph\">This is what I love early morning on Sunday.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Instead of getting a bit of a sleep in and then making my way out of bed to make my wife \u201cMother\u2019s Day Breakfast in Bed\u201d (i.e. An absurd of bacon on toast with an egg perched on top) \u2013 I get a call from our first responders saying that after Windows patching he could not get back onto Qlik Enterprise manager to restart our Qlik tasks.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">As I grumbled out of bed, I was hoping it was something simple like a Windows Defender firewall getting turned back on.&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Little did I know that I ended up working on the problem most of the day; meaning my wife missed her breakfast in bed, brunch in bed, lunch in bed and wine in bed.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Starting from the start<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Our Midrange team washed their hands of the issue and it was over to us to get Qlik Enterprise Manager<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Logging into my PC and going to the usual QEM address; I got greeted with the Chrome error of:<\/p>\n\n\n\n<pre class=\"wp-block-preformatted\">ERR_CONNECTION_CLOSED<\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">Rightio.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">To rule out the usual suspects of browser or VPN; I tried (sigh) Microsoft Edge and also Chrome from a virtual machine that was located in the internal network.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Again returned that ERR_CONNECTION_CLOSED error message<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">I next tried logging on to the QEM server itself.  The server has Chrome installed on it &#8211; useful for testing for firewall or DNS problems.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">I tried:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Using the DNS name<\/li>\n\n\n\n<li>Using the IP address<\/li>\n\n\n\n<li>Using localhost<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">This time I got a different error message:<\/p>\n\n\n\n<pre class=\"wp-block-preformatted\">ERR_CONNECTION_RESET<\/pre>\n\n\n\n<h2 class=\"wp-block-heading\">Off to Qlik for help<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">I raised a case with Qlik Support for help.  They speculated it was a DNS issue &#8211; which didn&#8217;t make sense to me.  If it was a DNS issue &#8211; I would have expected the IP address to work.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">I still had to answer a lot of questions and run lots of nslookup commands.  No &#8211; the DNS name hasn&#8217;t changed.  No &#8211; the IP address hasn&#8217;t change<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Other commands that they asked me to run:<\/p>\n\n\n<div class=\"wp-block-syntaxhighlighter-code \"><pre class=\"brush: bash; title: ; notranslate\" title=\"\">\ncurl -vk https:\/\/myqemaddress\/attunityenterprisemanager\/\n\ncurl -vk https:\/\/localhost\/attunityenterprisemanager\/\n\n<\/pre><\/div>\n\n\n<p class=\"wp-block-paragraph\">Nothing really pointed to where the issue was originated from.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">SkyNet to the rescue<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">While waiting for Qlik to get back to me and since we have access to <s>SkyNet<\/s> Google Gemini Enterprise &#8211; curiously I asked the Gen AI.<\/p>\n\n\n\n<blockquote class=\"wp-block-quote is-layout-flow wp-block-quote-is-layout-flow\">\n<p class=\"wp-block-paragraph\">In a browser on the server myqemaddress; I am trying access Qlik Enterprise manager on address https:\/\/myqemaddress\/attunityenterprisemanager\/ but getting an error ERR_CONNECTION_RESET.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">What could be the reason I am getting this error message?<\/p>\n<\/blockquote>\n\n\n\n<p class=\"wp-block-paragraph\">It returned the two usual suspects:<\/p>\n\n\n\n<ol class=\"wp-block-list\">\n<li>Service is down (Checked &#8211; no errors in the Enterprise manager logs)<\/li>\n\n\n\n<li>Proxy issue (We don&#8217;t have a proxy between QEM and the clients)<\/li>\n<\/ol>\n\n\n\n<p class=\"wp-block-paragraph\">But the third suggestion was interesting:<\/p>\n\n\n\n<blockquote class=\"wp-block-quote is-layout-flow wp-block-quote-is-layout-flow\">\n<p class=\"wp-block-paragraph\"><strong>3.\u00a0Verify Port Binding and SSL<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Enterprise Manager enforces HTTPS (defaulting to port 443).&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><a href=\"https:\/\/help.qlik.com\/en-US\/enterprise-manager\/May2024\/pdf\/Enterprise-Manager-Setup-and-User-Guide.pdf\" target=\"_blank\" rel=\"noreferrer noopener\"><\/a>&nbsp;If the SSL certificate is not correctly bound to the port, the connection will reset.<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>Check if the port is listening:<\/strong>\u00a0Open a command prompt as Administrator and run:<br><code>netstat -ano | findstr :443<\/code><br>If you don&#8217;t see a listener, the service hasn&#8217;t claimed the port.<\/li>\n\n\n\n<li><strong>Verify SSL Binding:<\/strong>\u00a0Run:<br><code>netsh http show sslcert | findstr :443<\/code><br>If no certificate is listed, the HTTPS setup is incomplete.<\/li>\n<\/ul>\n<\/blockquote>\n\n\n<div class=\"wp-block-syntaxhighlighter-code \"><pre class=\"brush: plain; title: ; notranslate\" title=\"\">\nnetsh http show sslcert | findstr :443\n    IP:port                      : &#x5B;::]:443\n<\/pre><\/div>\n\n\n<p class=\"wp-block-paragraph\">I ran the same command on our DEV Enterprise manager server that was working and got:<\/p>\n\n\n<div class=\"wp-block-syntaxhighlighter-code \"><pre class=\"brush: plain; title: ; notranslate\" title=\"\">\nnetsh http show sslcert | findstr :443\n    IP:port                      : 0.0.0.0:443\n    IP:port                      : &#x5B;::]:443\n<\/pre><\/div>\n\n\n<p class=\"wp-block-paragraph\">So prod was missing the wildcard address of 0.0.0.0:443<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">I added it back in using the guide that we have for updating certificates and it worked.  Thank you <s>SkyNet<\/s> Google Gemini Enterprise!  You saved the rest of Mother&#8217;s day<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Why was the SSL binding deleted?<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Well that is the question that I&#8217;d like to know.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">I could see in the logs that the certificate was deleted when patching was happening:<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><img fetchpriority=\"high\" decoding=\"async\" width=\"1024\" height=\"957\" src=\"https:\/\/craftcookcode.com\/wp-content\/uploads\/2026\/05\/code_qem_certificate-1024x957.png\" alt=\"\" class=\"wp-image-1792\" srcset=\"https:\/\/craftcookcode.com\/wp-content\/uploads\/2026\/05\/code_qem_certificate-1024x957.png 1024w, https:\/\/craftcookcode.com\/wp-content\/uploads\/2026\/05\/code_qem_certificate-300x280.png 300w, https:\/\/craftcookcode.com\/wp-content\/uploads\/2026\/05\/code_qem_certificate-768x717.png 768w, https:\/\/craftcookcode.com\/wp-content\/uploads\/2026\/05\/code_qem_certificate.png 1457w\" sizes=\"(max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">I sent an incident ticket off to Midrange.  So far I haven&#8217;t heard back from them.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">But at least QEM is up and running and the issue is documented so that if you come to this page in desperation; you can get QEM up and running as well and enjoy Mother&#8217;s day.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>This is what I love early morning on Sunday. Instead of getting a bit of a sleep in and then making my way out of bed&#46;&#46;&#46;<\/p>\n","protected":false},"author":1,"featured_media":1775,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"om_disable_all_campaigns":false,"_monsterinsights_skip_tracking":false,"_monsterinsights_sitenote_active":false,"_monsterinsights_sitenote_note":"","_monsterinsights_sitenote_category":0,"footnotes":""},"categories":[16],"tags":[36,110],"class_list":["post-1774","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-qlik-replicate","tag-qlikreplicate","tag-ssl"],"aioseo_notices":[],"_links":{"self":[{"href":"https:\/\/craftcookcode.com\/index.php?rest_route=\/wp\/v2\/posts\/1774","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/craftcookcode.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/craftcookcode.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/craftcookcode.com\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/craftcookcode.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=1774"}],"version-history":[{"count":7,"href":"https:\/\/craftcookcode.com\/index.php?rest_route=\/wp\/v2\/posts\/1774\/revisions"}],"predecessor-version":[{"id":1793,"href":"https:\/\/craftcookcode.com\/index.php?rest_route=\/wp\/v2\/posts\/1774\/revisions\/1793"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/craftcookcode.com\/index.php?rest_route=\/wp\/v2\/media\/1775"}],"wp:attachment":[{"href":"https:\/\/craftcookcode.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=1774"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/craftcookcode.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=1774"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/craftcookcode.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=1774"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}