Qualys Certificate Discovery Workflow

With v2025.0.0.0, AppViewX packages the Qualys Certificate Discovery Workflows into its Out-Of-the-Box (OOB) workflows so customers can import discovered certificates avoiding the additional overheads associated with a complete network discovery scan.

Based on the deployment type, the Qualys Certificate Discovery workflow is now packaged as OOB workflows in AppViewX.

Prerequisites

Ensure that Qualys is integrated with AppViewX with the following configuration settings:
  1. Go to (Menu) > Automation > Workflow > Integration.
    The Workflow > Integration page is displayed.
  2. Use the Search field to search for Qualys and click the Qualys card in the search results displayed.
    The Workflow > Integration > Vendor Configuration page is displayed.
  3. On the Workflow > Integration > Vendor Configuration page, enter the required configuration details.
  4. In the Credentials section, ensure that you:
    1. Select Basic Auth from the Auth Type dropdown list.
    2. Select Manual Entry from the Credential Type dropdown list.
    3. Enter your Qualys access key in the Username field.
    4. Enter your Qualys secret key in the Password field.

Initiating and Running the Workflow

  1. Go to (Menu) > Automation > SERVICE REQUESTS > View/Run.
    The Request :: View/Run page is displayed. This page is the complete Catalog of the custom and OOB workflows packaged in AppViewX.
  2. In the Search by Workflow, Category, Tags… field, enter the complete workflow name or a keyword to search the workflow.
  3. From the search results displayed, click the corresponding search result card.
  4. Hover the mouse over the result and click Run.
  5. Enter the User Inputs.
    Table 1. Discovery run type options
    Field Description
    *Description This is a read-only field.
    Important:
    • Ensure the Certview license is enabled to discover certificates from Qualys devices.
    • Ensure internet access on AppViewX instance for successful certificate discovery.
    Certificate Group
    *Certificate Group Selection Select Existing if a certificate group already exists or Create New .
    *Certificate Group Select from the dropdown list.
    *Certificate Status For the discovered certificates, select:
    • Managed: The discovered certificates and their objects will be moved to the inventory with the status set to Managed. Managed certificates are a fully-managed asset; AppViewX manages the entire lifecycle of the discovered certificates.
    • Monitored: The discovered certificates and their objects will be moved to the inventory with the status set to Monitored. Monitored certificates are only tracked and observed; AppViewX does not actively manage them.
    *: Mandatory fields
  6. Click Submit.
  7. In the Confirmation dialog box, click Ok.
    The workflow trigger request is submitted and AppViewX initiates API calls to Qualys to retrieve the discovered certificates from the Qualys database.

    In the left pane, the operations performed by AppViewX as part of the discovery data retrieval process (such as component initialization for communication with Qualys, gather credentials, and so on) are listed as they are performed.

    To uniquely identify certificates discovered from the Qualys source, the workflow updates the following metadata for each imported certificate:
    Table 2. Discovery run type options
    Attribute Name Attribute Key Description
    Assets Assets Assets where Qualys discovered the certificate
    For instructions on configuring certificate attributes, see Configuring Certificate Attributes.

    Once AppViewX has all the information required to proceed, it initiates an API call to export the list of vulnerabilities.

    The discovered certificates are added to the AppViewX CERT+ certificate inventory, along with the above explained metadata.

    Note: For certificates listed in the Qualys scan results that have already been discovered by AppViewX, the Qualys attributes listed above are updated except the discovery source, which will retain its original value.
  8. To view the certificate inventory, go to (Menu) > CERT+ > CERTIFICATE INVENTORY > Server.
    The Server Certificate inventory is displayed.

Scheduling a Workflow

  1. Go to (Menu) > Automation > SERVICE REQUESTS > View/Run.
    The Request :: View/Run page is displayed. This page is the complete Catalog of the custom and OOB workflows packaged in AppViewX.
  2. In the Search by Workflow, Category, Tags… field, enter the complete workflow name or a keyword to search the workflow.
  3. From the search results displayed, click the corresponding search result card.
  4. Hover the mouse over the result and click Schedule.
  5. In the Information section, enter a name for the workflow schedule and an optional description, if required.
  6. Click Save & Continue.
  7. Review the user inputs and modify them, if and as required.
  8. Click Save & Continue.
  9. In the Schedule section:
    1. To schedule the workflow for just one execution, under the Once tab, use the (Calendar) widget in the Starts on field to set a date and time for the workflow execution.
    2. After setting the required date and time for the workflow execution, click Done in the Calendar widget.
    OR
    1. To repeatedly trigger the workflow, under the Repeat tab, use the (Calendar) widget in the Starts on field to set a date and time for the workflow execution.
    2. From the Occurrence type field, from the following options, select how frequently the scheduled task should repeat:
      • Minutes
      • Hours
      • Days
      • Week
      • Month
      • Year
    3. From the Ends field, from the following options, select when the scheduled workflow execution should end:
      • Never: Workflow execution should never end.
      • After: Workflow execution should end after the number of occurrences specified in the Occurrences field.
      • On: Workflow execution should end on the date and time specified using the calendar widget.
  10. Click Schedule.
    The workflow is now automatically executed according to the specified schedule and the discovery results are updated in the CERT+ certificate inventory.