Secure LDAP (LDAPS) Configuration - VMware Aria Suite Lifecycle/vIDM

Products

• VCF Operations/Automation (formerly VMware Aria Suite)

Issue/Introduction

This article provides guidance on transitioning from standard LDAP (port 389) to secure LDAP (LDAPS, port 636) within the VMware Aria Suite Lifecycle (formerly vRealize Suite Lifecycle Manager) and VMware Identity Manager (vIDM) environments to ensure secured authentication for vRA and vRO.

Environment

• VMware Aria Suite Lifecycle
• VMware Identity Manager (vIDM) 3.3.x
• VMware Aria Automation (formerly vRA)

Cause

Security policies may require use of LDAPS. 

Resolution

Before proceeding, ensure a non-memory snapshot of all vIDM nodes has been taken.

Prerequisites

1. Obtain the Root CA and any Intermediate CA certificates from the Active Directory environment in Base64 encoded format (.PEM).
2. If the certificate is not readily available, use the following command to retrieve it:

   openssl s_client -connect <Domain_Controller_IP>:636 2> /dev/null | openssl x509

Configuration Steps

1. Log in to the VMware Identity Manager / Aria Suite Lifecycle administrator console using an account with System domain administrative privileges.
2. Navigate to Identity and Access Management > Directories.
3. Select the target Active Directory to be modified.
4. Update the Server URL to reflect the secure protocol and port: ldaps://<FQDN_or_IP>:636.
5. Enable the SSL or Require SSL option.
6. Locate the SSL Certificate field and paste the entire PEM-formatted certificate text (including the BEGIN and END delimiters).
7. Click Test Connection to verify the environment trusts the certificate.
8. Save the changes to finalize the configuration.

Additional Information

To speak with a customer representative or a Support Engineer see Contact Support. Scroll to the bottom of the page and click on your respective region.