Enabling LDAPS with certificate from a 3rd party CA

Question

_{Wednesday, January 8, 2020 4:14 PM}

Hi All

I have active directory environment in amazon, I would like to enable secure LDAP on domain controllers.

is it possible to get the LDAPS certificate from third party CA, and install it in domain controllers? will it work?

Kindly advice. Thanks!!

All replies (3)

_{Thursday, January 9, 2020 2:33 AM}

Hello，
Thank you for posting in our TechNet forum.

According to your description, we can try the following two methods. 

**Method 1
**
1.We can check if there is certificate templates related to Domain Controller (Domain Controller Authentication or Kerberos Authentication).
2.If so, we can request LDAPS certificate with Domain Controller (Domain Controller Authentication or Kerberos Authentication) certificate template.
3.Install such certificate on domain controller.
4.Check if such certificate works.

**Method 2
**
Or we can refer to the following article to enable LDAP certificate.
How to enable LDAP over SSL with a third-party certification authority
https://support.microsoft.com/en-sg/help/321051/how-to-enable-ldap-over-ssl-with-a-third-party-certification-authority

Best Regards,
Daisy Zhou

Please remember to mark the replies as answers if they help.
If you have feedback for TechNet Subscriber Support, contact [email protected].

_{Monday, January 13, 2020 2:57 AM}

Hi,
If this question has any update or is this issue solved? Also, for the question, is there any other assistance we could provide?
Best Regards,
Daisy Zhou

Please remember to mark the replies as answers if they help.
If you have feedback for TechNet Subscriber Support, contact [email protected].

_{Wednesday, January 15, 2020 7:08 AM}

Hi,
I am just writing to see if this question has any update. If anything is unclear, please feel free to let us know.
Thanks for your time and have a nice day!
Best Regards,
Daisy Zhou

Please remember to mark the replies as answers if they help.
If you have feedback for TechNet Subscriber Support, contact [email protected].