IT Expert AD/LDAP config and CA SSL certificate

[JerryO]

Looking for guidance or documentation to add our IT Expert gateway to our AD/LDAP so we can use our AD/LDAP creds required by our security group.

Also document to add a CA SSL Certificate for the gateway server.

Thank you

[mohsin015]

Most LDAPS issues in IT Expert usually come down to certificate trust or name mismatch.

First check that the AD domain controller has a valid SSL certificate installed for LDAP over SSL (port 636) and that it includes the correct DNS name in the SAN field. If the certificate is self signed, the full CA chain must be imported into the trust store of the EcoStruxure IT server.

Also verify that the hostname configured in IT Expert matches exactly the certificate common name or SAN entry. Even small mismatches can cause bind failures.

Next, confirm that port 636 is reachable from the IT Expert server and no firewall is blocking it. You can test this using a simple port check or LDAP test tool to confirm secure bind.

Finally, check the logs on both AD and IT Expert side to see whether the failure is happening during TLS handshake or authentication step. This usually helps isolate whether the issue is certificate trust or credential related.