---
title: Active Directory Configure secure LDAPS
url: https://devopstales.github.io/windows/msad-ldaps/
date: 2021-06-22
---


In this post I will show you how you can configure LDAPS in Active Directory.
<!--more-->

###  Install Certificate Authority
* On your Windows Server Machine, click on Start -> Server Manager -> Add Roles and Features.
![Example image](/img/include/adldaps1.webp)

* After selecting Add Roles and Features and Click on Next.
![Example image](/img/include/adldaps2.webp)

* Choose Role-based or feature-based installation option and Click on Next button.
![Example image](/img/include/adldaps3.webp)

* Choose Select a server from the server pool option & Select ldap server from the server pool and click on Next button.
![Example image](/img/include/adldaps4.webp)

* Choose Active Directory Certificate Services option from the list of roles and click on Next button.
![Example image](/img/include/adldaps5.webp)

* Choose nothing from the list of features and click on Next button.
* In Active Directory Certificate Services (AD CS) choose nothing and Click on Next button.
![Example image](/img/include/adldaps6.webp)

* Mark Certification Authority from the list of roles and Click on Next button.
![Example image](/img/include/adldaps7.webp)

* Click on Install button to confirm installation.
* Now, click on Configure Active Directory Certificate Services on Destination Server option and click on Close button.
![Example image](/img/include/adldaps8.webp)

* We can use the currently logged on user to configure role services since it belongs to the local Administrators group. Click on Next button.
* Mark Certification Authority from the list of roles and Click on Next button.
![Example image](/img/include/adldaps9.webp)

* Choose Enterprise CA option and Click on Next.
![Example image](/img/include/adldaps10.webp)

* Choose Root CA option and Click on Next button.
![Example image](/img/include/adldaps11.webp)

* Choose Create a new private key option and Click on Next button.
![Example image](/img/include/adldaps12.webp)

* Choose SHA256 as the hash algorithm and Click on Next. UPDATE : Recommended to select the most recent hashing algorithm.
![Example image](/img/include/adldaps13.webp)

* Click on Next button.
![Example image](/img/include/adldaps14.webp)

* Specify the validity of the certificate choosing Default 5 years and Click on Next button.
![Example image](/img/include/adldaps15.webp)

* Select the default database location and Click on Next.
![Example image](/img/include/adldaps16.webp)
* Click on Configure button to confirm.

* Once the configuration succeeded and click on Close button.
![Example image](/img/include/adldaps17.webp)

### Configuring secure LDAP:
* At restart the Domain Controller Will generate a new Certificate fos self.

### Test LDAPS
* windows + R
* Run: ldp

![Example image](/img/include/adldaps18.webp)

* Select connect menu in top right
* Add the name of the serfer for server
* port: 636
* selset SSL
* click OK