Skip to main content

Configuring LDAP over TLS

To configure LDAP over TLS, you must export a copy of the self-signed root CA certificate, install the self-signed root CA certificate using the exported file, and then enable LDAP over TLS on the SVM.

  1. Exporting a copy of the self-signed root CA certificate
    To use LDAP over SSL/TLS for securing Active Directory communication, you must first export a copy of the Active Directory Certificate Service's self-signed root CA certificate to a certificate file and convert it to an ASCII text file. This text file is used by ONTAP to install the certificate on the storage virtual machine (SVM).
  2. Installing the self-signed root CA certificate on the SVM
    If LDAP authentication with TLS is required when binding to LDAP servers, you must first install the self-signed root CA certificate on the SVM.
  3. Enabling LDAP over TLS on the CIFS server
    Before your CIFS server can use TLS for secure communication with an Active Directory LDAP server, you must modify the CIFS server security settings to enable LDAP over TLS.