Configure LDAP/AD Authentication Source with SSL

Products

• VCF Operations/Automation (formerly VMware Aria Suite)

Issue/Introduction

You need to configure LDAPS to get rid of all applications that are currently using unsigned LDAP requests

Environment

VMware Aria Operations 8.x

Cause

SSL is an option that can be enabled/disabled on AD Authentication Source configuration.
When try to Test the AD Authentication Source, following error will display:

"Test unsuccessful for ldap: xxx.xxx.xxx. Reason: Certificate is missing or invalid.  Importing CA certificate may resolve the issue."

Resolution

In order to authenticate AD with SSL, the AD certificate is required to be added to the Aria Operations Truststore.

• Go to Control Panel > Trusted Certificates
• Click "Import". Browse and insert the AD SSL Certificate file. Then click "Preview"
• Once certificate is validated, click "Import"

Upon importing the certificate, clicking "Test" will return successful.  Click "Save" to save the configuration.