How to Enable Secure LDAP (LDAPS)

Products

• Carbon Black App Control (formerly Cb Protection)

Issue/Introduction

How to enable the server to make secure LDAP (LDAPS) lookups.

Environment

• App Control Server: All Supported Versions 
• Microsoft Windows Active Directory

Resolution

1. Log in to the Console and navigate to https://ServerAddress/shepherd_config.php
2. Locate the Property:

   AdTrySecure

3. Change the value to 

   True

Additional Information

• By default this setting is not enabled.
• Enabling this setting allows the App Control Server to utilize Secure LDAP, however it must first be properly configured in the environment.
• If Secure LDAP is not properly configured in the environment, the App Control Server may failover to use the Insecure method to establish the connection.