diff --git a/en_US/cloud/cloud-setup.ad.ssl.md b/en_US/cloud/cloud-setup.ad.ssl.md index 43177192..3d70baf1 100644 --- a/en_US/cloud/cloud-setup.ad.ssl.md +++ b/en_US/cloud/cloud-setup.ad.ssl.md @@ -38,7 +38,10 @@ If it works for you on different Windows Server version, please let us know. - Choose `Active Directory Certificate Services` from the list, and click Next. -![](./images/setup.ad.ssl/setup_ad_ssl_4.png) +![](./images/setup.ad.ssl/setup_ad_ssl_4-1.png) + +![](./images/setup.ad.ssl/setup_ad_ssl_4-2.png) + - Click Next directly without choosing any item from list on the `Features` page. @@ -62,49 +65,59 @@ If it works for you on different Windows Server version, please let us know. ## Create a self-signed certificate -Now let’s create a certificate using AD CS Configuration Wizard. To open the wizard, click on “Configure Active Directory Certificate Services on the destination server” in the above screen. And then click Close. We can use the currently logged on user azureuser to configure role services since it belongs to the local Administrators group. Click Next. +Now let’s create a certificate using AD CS Configuration Wizard, To open the wizard: -![setup_ldaps_10](./images/windows_ad/setup_ldaps/setup_ldaps_10.png) +- Click `Start` on bottom-left corner of your Windows OS, click `Server Manager`. -11. Choose Certification Authority from the list of roles. Click Next. +![](./images/setup.ad.ssl/start-server-manager.png) -![setup_ldaps_11](./images/windows_ad/setup_ldaps/setup_ldaps_11.png) +- Click `Alert Flag` on top-right corner, click `Configure Active Directory Certificate Services on the destincation server`. -12. Since this is a local box setup without a domain, we are going to choose a Enterprise CA. Click Next. +![](./images/setup.ad.ssl/server_manager_configuration_ad_certificate.png) -![setup_ldaps_12](./images/windows_ad/setup_ldaps/setup_ldaps_12.png) +- Click `Next`: -13. Choosing Root CA as the type of CA, click Next. +![setup_ldaps_10](./images/setup.ad.ssl/config_ad_ssl_1.png) -![setup_ldaps_13](./images/windows_ad/setup_ldaps/setup_ldaps_13.png) +11. Choose `Certification Authority`. Click Next. -14. Since we do not possess a private key – let’s create a new one. Click Next. +![setup_ldaps_11](./images/setup.ad.ssl/config_ad_ssl_2.png) -![setup_ldaps_14](./images/windows_ad/setup_ldaps/setup_ldaps_14.png) +12. Choose `Enterprise CA`. Click Next. -15. Choosing SHA1 as the Hash algorithm. Click Next. +![setup_ldaps_12](./images/setup.ad.ssl/config_ad_ssl_3.png) -![setup_ldaps_15](./images/windows_ad/setup_ldaps/setup_ldaps_15.png) +13. Choose `Root CA` as the type of CA, click Next. + +![setup_ldaps_13](./images/setup.ad.ssl/config_ad_ssl_4.png) + +14. Since we do not possess a private key – let’s create a new one. choose `Create a new private key`, Click Next. + +![setup_ldaps_14](./images/setup.ad.ssl/config_ad_ssl_5.png) + +15. Choose `SHA1` as the Hash algorithm, change key lenth to `4096`, Click Next. + +![setup_ldaps_15](./images/setup.ad.ssl/config_ad_ssl_6.png) 16. Click Next. -![setup_ldaps_16](./images/windows_ad/setup_ldaps/setup_ldaps_16.png) +![setup_ldaps_16](./images/setup.ad.ssl/config_ad_ssl_7.png) -17. Specifying validity period of the certificate. Choosing 99 years. Click Next. +17. Specifying validity period of the certificate. Choosing `99 years`. Click Next. -![setup_ldaps_17](./images/windows_ad/setup_ldaps/setup_ldaps_17.png) +![setup_ldaps_17](./images/setup.ad.ssl/config_ad_ssl_8.png) -18. Choosing default database locations, click Next. +18. Choose default database locations, click Next. -![setup_ldaps_18](./images/windows_ad/setup_ldaps/setup_ldaps_18.png) +![setup_ldaps_18](./images/setup.ad.ssl/config_ad_ssl_9.png) 19. Click Configure to confirm. -![setup_ldaps_19](./images/windows_ad/setup_ldaps/setup_ldaps_19.png) +![setup_ldaps_19](./images/setup.ad.ssl/config_ad_ssl_10.png) 20. Once the configuration is successful/complete. Click Close. -![setup_ldaps_20](./images/windows_ad/setup_ldaps/setup_ldaps_20.png) +![setup_ldaps_20](./images/setup.ad.ssl/config_ad_ssl_11.png) 21. Restart system. @@ -113,21 +126,22 @@ After restart system, we can connect to the LDAP server over SSL. Now let us try to connect to LDAP Server (with and without SSL) using the ldp.exe tool. Connection strings for: + - `LDAP:\\ad.iredmail.org:389` - `LDAPS:\\ad.iredmail.org:636` 1. Click on Start --> Search ldp.exe --> Connection and fill in the following parameters and click OK to connect: -![test_ldap_1](./images/windows_ad/setup_ldaps/test_ldap_1.png) +![test_ldap_1](./images/setup.ad.ssl/test_ldap_1.png) 2. If Connection is successful, you will see the following message in the ldp.exe tool: -![test_ldap_2](./images/windows_ad/setup_ldaps/test_ldap_2.png) +![test_ldap_2](./images/setup.ad.ssl/test_ldap_2.png) 3. To Connect to LDAPS (LDAP over SSL), use port 636 and mark SSL. Click OK to connect. -![test_ldaps_1](./images/windows_ad/setup_ldaps/test_ldaps_1.png) +![test_ldaps_1](./images/setup.ad.ssl/test_ldaps_1.png) 4. If connection is successful, you will see the following message in the ldp.exe tool: -![test_ldaps_2](./images/windows_ad/setup_ldaps/test_ldaps_2.png) +![test_ldaps_2](./images/setup.ad.ssl/test_ldaps_2.png) diff --git a/html/images/setup.ad.ssl/config_ad_ssl_1.png b/html/images/setup.ad.ssl/config_ad_ssl_1.png new file mode 100644 index 00000000..fe5eb385 Binary files /dev/null and b/html/images/setup.ad.ssl/config_ad_ssl_1.png differ diff --git a/html/images/setup.ad.ssl/config_ad_ssl_10.png b/html/images/setup.ad.ssl/config_ad_ssl_10.png new file mode 100644 index 00000000..39b77313 Binary files /dev/null and b/html/images/setup.ad.ssl/config_ad_ssl_10.png differ diff --git a/html/images/setup.ad.ssl/config_ad_ssl_11.png b/html/images/setup.ad.ssl/config_ad_ssl_11.png new file mode 100644 index 00000000..6c6bc091 Binary files /dev/null and b/html/images/setup.ad.ssl/config_ad_ssl_11.png differ diff --git a/html/images/setup.ad.ssl/config_ad_ssl_2.png b/html/images/setup.ad.ssl/config_ad_ssl_2.png new file mode 100644 index 00000000..e8c0513c Binary files /dev/null and b/html/images/setup.ad.ssl/config_ad_ssl_2.png differ diff --git a/html/images/setup.ad.ssl/config_ad_ssl_3.png b/html/images/setup.ad.ssl/config_ad_ssl_3.png new file mode 100644 index 00000000..c20a51cf Binary files /dev/null and b/html/images/setup.ad.ssl/config_ad_ssl_3.png differ diff --git a/html/images/setup.ad.ssl/config_ad_ssl_4.png b/html/images/setup.ad.ssl/config_ad_ssl_4.png new file mode 100644 index 00000000..0aafcaab Binary files /dev/null and b/html/images/setup.ad.ssl/config_ad_ssl_4.png differ diff --git a/html/images/setup.ad.ssl/config_ad_ssl_5.png b/html/images/setup.ad.ssl/config_ad_ssl_5.png new file mode 100644 index 00000000..ecd85e7a Binary files /dev/null and b/html/images/setup.ad.ssl/config_ad_ssl_5.png differ diff --git a/html/images/setup.ad.ssl/config_ad_ssl_6.png b/html/images/setup.ad.ssl/config_ad_ssl_6.png new file mode 100644 index 00000000..5416bfd0 Binary files /dev/null and b/html/images/setup.ad.ssl/config_ad_ssl_6.png differ diff --git a/html/images/setup.ad.ssl/config_ad_ssl_7.png b/html/images/setup.ad.ssl/config_ad_ssl_7.png new file mode 100644 index 00000000..cf0d951e Binary files /dev/null and b/html/images/setup.ad.ssl/config_ad_ssl_7.png differ diff --git a/html/images/setup.ad.ssl/config_ad_ssl_8.png b/html/images/setup.ad.ssl/config_ad_ssl_8.png new file mode 100644 index 00000000..52971465 Binary files /dev/null and b/html/images/setup.ad.ssl/config_ad_ssl_8.png differ diff --git a/html/images/setup.ad.ssl/config_ad_ssl_9.png b/html/images/setup.ad.ssl/config_ad_ssl_9.png new file mode 100644 index 00000000..7dcf362e Binary files /dev/null and b/html/images/setup.ad.ssl/config_ad_ssl_9.png differ diff --git a/html/images/setup.ad.ssl/server_manager_configuration_ad_certificate.png b/html/images/setup.ad.ssl/server_manager_configuration_ad_certificate.png new file mode 100644 index 00000000..471a7d45 Binary files /dev/null and b/html/images/setup.ad.ssl/server_manager_configuration_ad_certificate.png differ diff --git a/html/images/setup.ad.ssl/setup_ad_ssl_4-1.png b/html/images/setup.ad.ssl/setup_ad_ssl_4-1.png new file mode 100644 index 00000000..f6789088 Binary files /dev/null and b/html/images/setup.ad.ssl/setup_ad_ssl_4-1.png differ diff --git a/html/images/setup.ad.ssl/setup_ad_ssl_4-2.png b/html/images/setup.ad.ssl/setup_ad_ssl_4-2.png new file mode 100644 index 00000000..bccf05a1 Binary files /dev/null and b/html/images/setup.ad.ssl/setup_ad_ssl_4-2.png differ diff --git a/html/images/setup.ad.ssl/setup_ad_ssl_9.png b/html/images/setup.ad.ssl/setup_ad_ssl_9.png index 6a005cc9..412e5e1e 100644 Binary files a/html/images/setup.ad.ssl/setup_ad_ssl_9.png and b/html/images/setup.ad.ssl/setup_ad_ssl_9.png differ diff --git a/html/images/setup.ad.ssl/test_ldap_1.png b/html/images/setup.ad.ssl/test_ldap_1.png new file mode 100644 index 00000000..11940078 Binary files /dev/null and b/html/images/setup.ad.ssl/test_ldap_1.png differ diff --git a/html/images/setup.ad.ssl/test_ldap_2.png b/html/images/setup.ad.ssl/test_ldap_2.png new file mode 100644 index 00000000..b4a5c264 Binary files /dev/null and b/html/images/setup.ad.ssl/test_ldap_2.png differ diff --git a/html/images/setup.ad.ssl/test_ldaps_1.png b/html/images/setup.ad.ssl/test_ldaps_1.png new file mode 100644 index 00000000..45a37c11 Binary files /dev/null and b/html/images/setup.ad.ssl/test_ldaps_1.png differ diff --git a/html/images/setup.ad.ssl/test_ldaps_2.png b/html/images/setup.ad.ssl/test_ldaps_2.png new file mode 100644 index 00000000..aae037f8 Binary files /dev/null and b/html/images/setup.ad.ssl/test_ldaps_2.png differ