Installing the LDAPS TLS certificates

Repeat the following steps on each domain controller to install the LDAPS TLS certificate in the NTDS Personal certificate store.

To install the LDAPS TLS certificate on a domain controller:

1. On the domain controller machine, copy the P12 file obtained when Generating the LDAPS TLS certificates.

2. Open Microsoft Management Console (MMC) – for example, by pressing the Windows key on the keyboard and typing “mmc.exe” in the Windows search box.

   

3. Select File > Add/Remove Snap-in.

4. In the Available snap-ins column, select Certificates.

   

5. Click Add.

6. Select Service account and click Next.

   

7. Select Local computer and click Next.

   

8. Select Active Directory Domain Services and click Finish.

   

9. Click OK to close the Add/Remove Snap-in dialog.

10. In the management console, right-click NTDS Personal under Certificates.

    

11. Select All Tasks > Import to display the Certificate Import Wizard.

12. Follow the wizard instructions to import the certificate file, enter the password, and install the certificate in the NTDS Personal certificate store.