ccm 4.1 integration with microsoft AD over ssl.

[iziks]

Hi,

may be someone known procedure about intagrating ccm 4.1(3) with microsoft AD

over ssl (ldap over ssl).

Thanks.

[gogasca]

Enabling SSL is a 3 step process.

1. Obtaining a Server Certificate

http://www.microsoft.com/windows2000/en/server/iis/default.asp?url=/wind

ows2000/en/server/iis/htm/core/iicerts.htm

2. Enabling SSL on directory server (AD)

http://support.microsoft.com/default.aspx?scid=kb;en-us;247078

3. Enabling SSL on CCM Server using plug-in

If CU chooses to have self signed certificate then.

1. Use Add Remove Programms->Windows Components->Certificate Services

and install an Enterprise Certificate Authority on a Windows 2000 server

(not on CCM Server). All Domain Controllers in the forest will

automatically enroll for and install the appropriate certificate.

Typically you can install it on the server where AD is installed.

CCM server need not be in the domain for this.

2. Export the certificate (generate .cef file) from CA

http://www.microsoft.com/technet/prodtechnol/windowsserver2003/library/S

erverHelp/491838e9-f84c-4c73-ad44-68af8e944e3f.mspx

Select 'Details' tab and then 'Copy to File'.

Please see the snapshot attached.

3. Manually copy this file to the CCM server.

4. Run the directory plug-in to import this into CCM Server.

[iziks]

Thanks for help,

but if I want use external CA?????????

Thanks.