Take the 2-minute tour ×
Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

I have a Server 2008 R2 server with ADDS installed. I'm trying to configure HP's ILO utility to connect to it over SSL. I installed the Active Directory Certificate Service, after doing so I'm still not able to connect to LDAP over SSL.

I checked the event log and it's showing warnings with Event ID 36886 saying that there aren't default credentials yet. I'm not too sure why this is happening. I haven't done anything with ADCS other than installing the service do I need to create a certificate for the server?

share|improve this question
1  
Setting up certificate services properly isn't something that you can just do. There are many steps to set it up properly. See Best Practices for Implementing a Microsoft Windows Server 2003 Public Key Infrastructure and blogs.technet.com/b/askds/archive/2010/08/23/… –  Zoredache Aug 25 '10 at 0:17
    
Followup to Zoredache: Setting up ADCS without really understanding what you're getting into can lead to significant problems down the road (usually culminating in scrapping the deployed PKI and doing it all over again). If you can't commit the time or resources to mapping out your deployment, you should consider using another certificate source (startssl.com) or not using SSL. –  Chris S Aug 25 '10 at 17:08

1 Answer 1

You don't have a server certificate to use with LDAP. This is exactly what the event log is telling you. Installing Certificate Service will not create a certificate for you, this is an explicit step you need to do.

How to get a certificate for your LDAP server will depend on whether you plan to deploy your own PKI (using Certificate Services) or just use a 3rd party certificate. If you are not familiar with this, you need to do some research and pick which way to go. The former is harder and more error prone, but most flexibe and the latter is easy to get going but not very flexible.

share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.