on Feb 15, 2016My connector test connection is successful when i'm using the port 389.
But during the test connector capability, we are getting an error with 389 port which has to be changed to SSL port 636. Before doing this, we need to import the SSL certificate.
Where can I import and How???
This is the error i'm getting, to overcome this, I'll use 636 port.
How to use AD's SSL certificate in RSA Via? I need a help to configure whether to import the certificate in Linux box or just to update the aveksa keystore.
As far as I know, AD connector using SSL should work without configuring any AD certificate information.
Try with port 636 and update if you are still facing issues
you can find relevant information in the installation guide (Import Trusted Certificates)
You need to import AD server certificate (if your AD has chained certs make sure you import root,intermediate and server certs in right order) in
JAVA security's cacerts keystore. I believe installation guide has more detailed instructions. After importing the certs you need to restart the RSA via L&G server.
As Vishwanath said , we need to import AD certificate in ACM server cacert in order to successfully communicate .
Without certificate, SSL handshake will not take place.
Thank you all... I have installed AD certificates on AD server, that's it. It is working now with SSL port.
Cheers!!!!
Hi Vijayabaskar Balakrishnan, can you please share the steps fou followed in order to install the certificates?
Thank you.
You just need to use the Add Role and features wizard from AD server to import Active Directory Certificate Services.
You can go to this wizard option from service manager dashboard.
Hi Vijayabaskar,
My understanding is that you:
1. Import SSL certificate into AD
2. Edit AD collector
3. Choose port 636
4. If the connection is ok and the cert properly installed in AD, the cert from AD will be pulled into the collector definition.
You are good to go.
Regards,
Diane
What error?
Did you try with port 636?