Configuring AD Domain Certificate Authentication

Scenarios

When AD domain authentication is used, you can enable LDAPS so that cloud desktops can communicate with AD server applications through LDAPS, improving network security.

Prerequisites

• You have obtained the password of the AD domain administrator.
• LDAPS has been enabled on the AD server, and the CA root certificate file has been exported from the AD server.
  

  • The CA root certificate file must be in the PEM format.
  • For details about how to enable LDAPS, see . For details about how to export the root certificate of the LDAPS-enabled AD server, see Exporting the Root Certificate of the LDAPS-enabled AD Server.

Procedure

1. Log in to the management console.

2. Click Tenant Configuration.

   The Tenant Configuration page is displayed.

3. Click Modify domain configuration.
4. Enter the domain administrator password.
5. Expand Advanced Settings and enable Using LDAPS.
6. In the Key certificate area, click Certificate Upload and select the certificate file in Prerequisites.
   

   Only certificate files in the PEM format can be imported.

7. Click OK.