IBM Support

QRadar: Application installation displays a warning that the extension is not signed by IBM

Troubleshooting


Problem

When a user attempts to install an application, a confirmation message is displayed to users that the application is not signed by IBM. All code released by IBM is expected to be code signed to verify that the extension was created and complied by IBM. This technical note describes the error and what to do when you see a code signing error for an IBM application.

Symptom

When you attempt to install an application, a confirm dialogue is displayed to confirm whether you want to install an unsigned application. For example,
image-20221004183325-1
If you are seeing this error, the extension you are installing does not meet IBM's enhanced requirements for application signing. New alerts are in place to ensure extensions are signed by the developer and by IBM in QRadar 7.5.0 Update Package 3 and later.
  • All newly developed or updated apps complete installation checks to ensure that the app is signed by the original developer as well as the IBM App validation team.
  • Installing an app without valid code signatures means the user cannot be certain that the developer is IBM or an IBM Business Partner.
  • Apps that are signed by the developer and not by IBM indicates the app developer is an IBM partner, but IBM did not validate the application. Early access business partner applications or extensions distributed directly to users (outside of the IBM X-Force App Exchange) can generate this alert to administrators.
  • Applications on the X-Force App Exchange are signed with both types of certificates, and show up as SIGNED, VERIFIED, and VALIDATED in the Content Management Tool (CMT).

Document Location

Worldwide

[{"Type":"MASTER","Line of Business":{"code":"LOB77","label":"Automation Platform"},"Business Unit":{"code":"BU048","label":"IBM Software"},"Product":{"code":"SSBQAC","label":"IBM Security QRadar SIEM"},"ARM Category":[{"code":"a8m0z000000cwt3AAA","label":"QRadar Apps"}],"ARM Case Number":"","Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"7.5.0"},{"Type":"MASTER","Line of Business":{"code":"LOB77","label":"Automation Platform"},"Business Unit":{"code":"BU048","label":"IBM Software"},"Product":{"code":"SSKMKU","label":"IBM QRadar on Cloud"},"ARM Category":[{"code":"a8m0z000000cwt3AAA","label":"QRadar Apps"}],"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"All Versions"}]

Log InLog in to view more of this document

This document has the abstract of a technical article that is available to authorized users once you have logged on. Please use Log in button above to access the full document. After log in, if you do not have the right authorization for this document, there will be instructions on what to do next.

Document Information

Modified date:
11 April 2023

UID

ibm16827007