Go to: etc/system/local/server.conf [sslConfig] serverCert = $SPLUNK_HOME/etc/auth/server.pem If you are seeing server.pem, or this entry is missing (which means you are using default) what that error means is that you are using a self signed certificate, which is a vulnerability. You will need to purchase third party SSL certificates and implement it to your system. There's more information here: https://docs.splunk.com/Documentation/Splunk/8.0.5/Security/Howtogetthird-partycertificates
... View more