Configuring updates behind a proxy server that uses SSL or TLS interception

To configure IBM QRadar updates behind a proxy server, add your proxy server's CA certificate to the ca-bundle.crt file.

Procedure

  1. Create a backup copy of the ca-bundle.crt file in QRadar.
    For example, use the copy command to create a .bak file: cp /etc/ssl/certs/ca-bundle.crt{,bak}.
  2. Get the root CA certificate from your proxy server. For more information, see the proxy server documentation.
    Note: You must use only the root CA certificate from your proxy server.
  3. Add the CA certificate to the ca-bundle.crt file by typing the following command: 
    cp proxycert.pem /etc/pki/ca-trust/source/anchors
  4. Extract the certificate by typing the following command: 
    update-ca-trust extract
  5. Type the following command to run the auto update: 
    /opt/qradar/bin/UpdateConfs.pl -ds runnow 1
  6. Verify that auto updates work by tailing the log in /var/log/autoupdates/.