# AD Source and IQ Service Issues

**URL:** <https://developer.sailpoint.com/discuss/t/ad-source-and-iq-service-issues/195329>\
**Category:** SHF Discussion and Questions\
**Tags:** identity-security-cloud\
**Created:** [February 7, 2026, 11:26am UTC](https://developer.sailpoint.com/discuss/t/ad-source-and-iq-service-issues/195329 "2026-02-07T11:26:44Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![Vasant](https://avatars.discourse-cdn.com/v4/letter/v/ecccb3/32.png) [@Vasant](https://developer.sailpoint.com/discuss/u/Vasant)\
**Post date:** [February 7, 2026, 11:26am UTC](https://developer.sailpoint.com/discuss/t/ad-source-and-iq-service-issues/195329/1 "2026-02-07T11:26:44Z")

</div>

Hi All,

I have two queries that I’ll explain one by one:

**First Query:**

I have created an AD source and installed the IQ service. However, I am unable to copy the Windows certificate to the VA.

- `openssl s_client -connect server.example.com:636` is working for TLS port 5050, but not for port 636.

- It shows **“TLS handshake done”** but **“no peer certificate available.”**

- On my Windows machine, the IQService instance certificate is available in both the Personal and Trusted Authority folders.

I need to copy this certificate to my VA, but note that we **do not have WinSCP** available.

**Second Query:**

The AD test connection is not working even after disabling the TLS connection.

- Active Directory requires the IQ service only for provisioning. Even without the IQ service, the test connection should work.

- I checked the CCG logs, which return a **510 response.**

Any insights on these queries would be greatly appreciated.

Regards,  
Vasant

---

<div class="post-metadata">

**Author:** ![mkumariaas](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/mkumariaas/32/40387_2.png) [@mkumariaas](https://developer.sailpoint.com/discuss/u/mkumariaas)\
**Post date:** [February 7, 2026, 1:30pm UTC](https://developer.sailpoint.com/discuss/t/ad-source-and-iq-service-issues/195329/2 "2026-02-07T13:30:01Z")

</div>

Please share configuration of application. If you are using valid port and host then the issue will not appear. I will suggest first configure without tls and port as 5050 for iqservice  
Catalog server port as 3268  
Auth type simple  
Then check if everything is working and then change the port as per need so that you can narrow down the issue.

---

<div class="post-metadata">

**Author:** ![kompala](https://avatars.discourse-cdn.com/v4/letter/k/ea5d25/32.png) [@kompala](https://developer.sailpoint.com/discuss/u/kompala)\
**Post date:** [February 8, 2026, 3:20am UTC](https://developer.sailpoint.com/discuss/t/ad-source-and-iq-service-issues/195329/3 "2026-02-08T03:20:42Z")

</div>

@Vasant Did you do the network connectivity check between VA and AD DC ?

---

<div class="post-metadata">

**Author:** ![Vasant](https://avatars.discourse-cdn.com/v4/letter/v/ecccb3/32.png) [@Vasant](https://developer.sailpoint.com/discuss/u/Vasant)\
**Post date:** [February 9, 2026, 10:06am UTC](https://developer.sailpoint.com/discuss/t/ad-source-and-iq-service-issues/195329/4 "2026-02-09T10:06:39Z")

</div>

Hi @mkumariaas & @kompala , Thanks for response

I have disabled the TLS configuration and tried to connect it without IQService where I’m not able to make port as null in UI Through API I made it null and ran Test Connection. It worked.

Coming to IQService where iam able to copy the certificate from local windows to VA and changed the file name to .PEM and ran the test connection. It worked.

---

<div class="post-metadata">

**Author:** ![system](https://global.discourse-cdn.com/sailpoint/original/2X/f/f2136700ed5e3703e0b85e02f6be799dacca7735.png) [@system](https://developer.sailpoint.com/discuss/u/system)\
**Post date:** [April 10, 2026, 10:07am UTC](https://developer.sailpoint.com/discuss/t/ad-source-and-iq-service-issues/195329/5 "2026-04-10T10:07:39Z")

</div>

This topic was automatically closed 60 days after the last reply. New replies are no longer allowed.