<yambe:breadcrumb>Windows_Server_2008_Enterprise_R2|Windows Server 2008 Enterprise R2</yambe:breadcrumb>

Setup AD to respond to LDAP queries over LDAPS protocol

Create self-signed certificate authority for AD certificate

To create a self-signed certificate for AD use following steps:

Go to Start Menu -> Administrative Tools -> Server manager
From Server Manager Roles node choose "Add Roles" link from the right side pane.
On "Before You Begin" click next
Select "Active Directory Certification Service" and click next
On "Introduction to Active Directory Certificate Services" click next
Leave "Certificate authority" selected and click "next"
In Setup Type leave "Enterprise" selected and click "next"
In CA type leave "Root CA" selected and click next
Leave "Create a new private key" selected and click next
Leave defaults as it is on "Configure Cryptography for CA" and click next
Choose appropriate CN and DN for server
Choose appropriate validity period and click next
In "Configure certificate database" leave values as it is and click next
On "Confirmation" window click "Install"
Close window of "Successful installation message