Third parties can perform key searches on your Symantec Encryption Management Server over LDAP. However, they cannot perform key searches over LDAPS even though inbound connections over LDAPS (port 636) are permitted by your organization's firewall.
Encryption Management Server release 3.3.2 MP13 and above.
The TLS certificate bound to the Encryption Management Server LDAPS interface is not trusted by the third party.
Please ensure that the following requirements are met: