How to enable SSL for LDAP on Active Directory?

How to enable SSL for LDAP on Active Directory?

Problem:  webNetwork requires SSL over LDAP connection.



Cause:  To ensure best security possible, you will want "end-to-end" encryption.  This is only possible with encrypting the LDAP connection.  Without SSL over LDAP some features, such as Password Reset, will not function. 



Solution(s):  IMPORTANT - consult Microsoft for best practices on implementation for your environment.
  • Enable Active Directory Certificate Services role on member server
  • Setup Enterprise Root CA on server
  • Reboot all domain controllers in forest


References:
Active Directory Certificate Services Step-by-Step Guide