SSL setup for Active Directory

OneSpan Authentication Server can use SSL when communicating with Active Directory. For this to work correctly, an enterprise root certification authority must exist in the forest. It may be installed on any server in the forest, if the server selected is available to the domain controller(s) used by OneSpan Authentication Server.

To set up SSL communication between OneSpan Authentication Server and Active Directory

1. If not already available, install Certificate Services on the LDAP back-end server.

   This is a Windows component and should be available on your Windows operating system installation media.

2. Generate an enterprise root CA certificate.

   You may need to wait several minutes to allow the domain controllers to enroll for domain controller certificates.

Alternatively, during installation you can choose not to use SSL communication between OneSpan Authentication Server and Active Directory. If LDAP SSL will be disabled, no certificate authority is required.

If you enable SSL with Active Directory, you will have to configure OneSpan Authentication Server to communicate via SSL as well (see Configuring SSL for back-end authentication (via Active Directory)).