# Adding AD certificates to VA

**URL:** <https://developer.sailpoint.com/discuss/t/adding-ad-certificates-to-va/94153>\
**Category:** SHF Discussion and Questions\
**Tags:** identity-security-cloud\
**Created:** [December 20, 2024, 9:28am UTC](https://developer.sailpoint.com/discuss/t/adding-ad-certificates-to-va/94153 "2024-12-20T09:28:24Z")\
**Posts on this page:** 6\
**Page:** 1

<div class="post-metadata">

**Author:** ![shaffusailpoint](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/shaffusailpoint/32/28096_2.png) [@shaffusailpoint](https://developer.sailpoint.com/discuss/u/shaffusailpoint)\
**Post date:** [December 20, 2024, 9:28am UTC](https://developer.sailpoint.com/discuss/t/adding-ad-certificates-to-va/94153/1 "2024-12-20T09:28:24Z")

</div>

1. How to add AD certificates to VAs, what are step?
2. How to enable TLS connection from VA to IQ service?
3. How configure the IQ service accordingly on the source?

Some body help on this.

---

<div class="post-metadata">

**Author:** ![Abhishek\_1995](https://avatars.discourse-cdn.com/v4/letter/a/d26b3c/32.png) [@Abhishek\_1995](https://developer.sailpoint.com/discuss/u/Abhishek_1995)\
**Post date:** [December 20, 2024, 9:35am UTC](https://developer.sailpoint.com/discuss/t/adding-ad-certificates-to-va/94153/2 "2024-12-20T09:35:55Z")

</div>

Hi @shaffusailpoint,

If you want to understand what ever your queries is please go through this document it may be helpful for you.

> **[TLS Configuration on Virtual Appliances](https://documentation.sailpoint.com/connectors/iqservice/help/common/va_topics_and_snippets/tls_config_on_va.html)**
>
> SailPoint Connectors Documentation

Thank you!

---

<div class="post-metadata">

**Author:** ![shaffusailpoint](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/shaffusailpoint/32/28096_2.png) [@shaffusailpoint](https://developer.sailpoint.com/discuss/u/shaffusailpoint)\
**Post date:** [December 20, 2024, 9:46am UTC](https://developer.sailpoint.com/discuss/t/adding-ad-certificates-to-va/94153/3 "2024-12-20T09:46:16Z")

</div>

this document is not in layman terms, is there any steps so that a normal person like me can understand  
for example in a link " The `va-config-<va_id>.yaml`"  
what is this va\_id I did not understand in document no where mentioned how to get that

---

<div class="post-metadata">

**Author:** ![suraj\_gorle](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/suraj_gorle/32/35158_2.png) [@suraj\_gorle](https://developer.sailpoint.com/discuss/u/suraj_gorle)\
**Post date:** [December 20, 2024, 11:28am UTC](https://developer.sailpoint.com/discuss/t/adding-ad-certificates-to-va/94153/4 "2024-12-20T11:28:16Z")

</div>

Hi @shaffusailpoint  
Good Day!

Kindly follow below steps for importing the certificate from target system such as AD and IQService.

1. Please input the below command to check whether target system has TLS certificate installed or not.  
openssl s\_client -connect ip/fqdn of machine:TLS port  
for example openssl s\_client -connect 192.54.35.32:636
2. Check the certificate details in command the command response.
3. After validation copy the certificate from begin certificate to end certificate
4. Save the certificate in .cer format.
5. Open winSCP(Paste the certificate in /home/sailpoint/certificates directory) or directly create the file in VA and paste the copied certificate. Also change the format of certificate from .cer to .pem.
6. After placing certificate in the above mentioned directory restart the ccg by using below command.  
sudo systemctl restart ccg
7. Test the connection for your source.  
Hope the above information will help you.😊  
Thank you!

---

<div class="post-metadata">

**Author:** ![shaffusailpoint](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/shaffusailpoint/32/28096_2.png) [@shaffusailpoint](https://developer.sailpoint.com/discuss/u/shaffusailpoint)\
**Post date:** [December 20, 2024, 11:58am UTC](https://developer.sailpoint.com/discuss/t/adding-ad-certificates-to-va/94153/5 "2024-12-20T11:58:53Z")

</div>

Thanks a lot Suraj! will check on this

---

<div class="post-metadata">

**Author:** ![system](https://global.discourse-cdn.com/sailpoint/original/2X/f/f2136700ed5e3703e0b85e02f6be799dacca7735.png) [@system](https://developer.sailpoint.com/discuss/u/system)\
**Post date:** [February 18, 2025, 11:59am UTC](https://developer.sailpoint.com/discuss/t/adding-ad-certificates-to-va/94153/6 "2025-02-18T11:59:14Z")

</div>

This topic was automatically closed 60 days after the last reply. New replies are no longer allowed.