A page in your DokuWiki was added or changed. Here are the details: Date : 2010/10/19 12:11 Browser : Mozilla/5.0 (X11; U; Linux i686; fr-FR; rv:1.9.2.10) Gecko/20100915 Ubuntu/10.04 (lucid) Firefox/3.6.10 IP-Address : 90.53.223.176 Hostname : ALyon-751-1-40-176.w90-53.abo.wanadoo.fr Old Revision: none New Revision: http://ltb-project.org/wiki/documentation/general/active_directory_certificates Edit Summary: created User : coudot
====== Manage Active Directory certificates ====== <note>Certificate is mandatory to use LDAPS with Active Directory</note> ===== Create a certificate ===== Documentation from http://confluence.atlassian.com/display/CROWD/Configuring+an+SSL+Certificate+for+Microsoft+Active+Directory - Using the Active Directory Control Panel – Add/Remove Programs administration tool: * Select ''Add/Remove Windows Components'' to start the Windows Components Wizard. * Place check marks next to ''Certificate Services'' and ''Internet Information Services (IIS)''. * Click ''Next>''. - Select ''Enterprise root CA'' Certificate Authority Type and click ''Next>''. - Enter a ''CA name'' (server name) and click ''Next>''. On Windows Server 2003, this is the ''Common name for this CA''. - Leave the ''Data Storage Locations'' as default and click ''Next>''. - The software installation process is complete. Click ''Finish''. ===== Update a certificate ===== When AD certificate will expire, you probably want to udpate it with the same key. To do this: - Click ''Start'' -> ''run'' -> mmc - In MMC click ''Console'' -> ''Add snap-in'' -> ''Add'' -> ''Certificates'' -> ''Add'' -> ''Computer Account'' -> ''Next'' -> ''Finish'' - Expand Certificates (Local Computer) - Go in branch ''Personal'' - Select the current certificate - Right click on it -> ''All tasks'' -> ''Generate with the same key'' -- This mail was generated by DokuWiki at http://ltb-project.org/wiki/ _______________________________________________ ltb-changes mailing list [email protected] http://lists.ltb-project.org/listinfo/ltb-changes
