How to configure AD CS with round robin pool in DCO

[DCIM_Support]

Hi team,

Due to high accessibility reason the customer needs to configure DCO to get authentication with Active Directory Certification Server with DNS round robin pool.

The customer reports

• The customer want to create the authentication server against a DNS name of the domain, which resolve to a different IP/DC each time (round robin pool), the main reason is HA. The problem is, that once I'm creating the authentication server, it imports the certificate for the specific IP/DC that answer at that specific time, but if I create a user who authenticate against this domain, the next time he will try to connect he might try to authenticate against an IP/DC certificate which the application didn't import, and result with an SSL error. Is this scenario supported by the application? If so, then how should we configure it?

Is it possible to use the AD option?

(CID:113642585)

[DCIM_Support · Accepted solution]

Hi Dmitry,

As far as I know, the described scenario is unsupported in DCO - currently when integrating an authentication server, such as an AD server, we need to use the specific host/IP address and its configured domain. If you wish, I can capture a feature request for you, thanks.

Kind regards

(CID:113642681)

[DCIM_Support]

This question is closed for comments. You're welcome to start a new topic if you have further comments on this issue.