ASA integration with Active Directory using LDAPS

[mumbles202]

Setting up a new ASA running 9.18 and trying to tie it into AD. This is replacing an existing ASA that was previously connected to AD using LDAPS. On rhe new ASA I can do test authentication without any issue if I use port 389, but once I switch to 636 it fails. On the old firewalls I can do the authentication using either 389 or 636. 

Not sure if I missed a step and can't seem to find documentation on using 636 anymore. I tried importing the root CA certificate ( which happens to be on a DC) but that didn't fixed it. 

Any insight would be appreciated. 

[mumbles202]

On the working unit I don't see the certificate for the internal CA; actually the only certificates are see are 3rd party CAs from well-known sources and the identity certificates for the firewall.

[MHM Cisco World]

this answer your Q

the Server use Identity Cert Issue by 3rd party CA and work ASA use it to connect to Server via SSL.
make double check in server see which Cert. it use and issue of this cert. 

Goodluck friend 

MHM