Setup SSL support for Windows Active Directory


Windows Active Directory requires secure connection for updating user password from another host via LDAP protocol. In this tutorial, we will show you how to setup SSL support for Active Directory with a self-signed ssl cert.

This tutorial has been tested on:

If it works for you on different Windows Server version, please let us know.

Enable Active Directory Certificate Services

Create a self-signed certificate

Now let’s create a certificate using AD CS Configuration Wizard, To open the wizard:


After restart system, we can connect to the LDAP server over SSL. Now let us try to connect to LDAP Server (with and without SSL) using the ldp.exe tool.

Connection strings for: