Connect to Active Directory with TLS

Identity Security Cloud (ISC) ISC Discussion and Questions
1

I am trying to set up a new AD source with TLS enabled. Have followed all steps, but getting this error during “Test Connection”

image
image689×537 21.3 KB

Any help would be highly appreciated

2

CA used to sign your AD certificate is not in you Trust Store (on your VA). You have to add it in order to make this certificate validated properly

Here is manual how to do that

And few more usefull docs:

1 Like
3

Thanks @kjakubiak

I will check these and get back to you

1 Like
4

I had copied the wrong certificate in the VA. After fixing Test Connection was successful before setting up the IQService. However, once I added IQService details, I am getting the following error during Test Connection
image

5

@iamology did you check the TLS option in IQService and what is the port you have mentioned in IQService?

6

Looks like network issue now, generaly as long as you don’t configure iqservice details test connection is checking only LDAP connection to AD, once iqService is configured id checks also RPC calls. Do you have network traffic allowed between iqService and DCs?

7

@rajeshs
Yes I have enabled the TLS under IQService settings and port is 5527

image
image868×525 7.63 KB

image

@kjakubiak
Both DC and IQService servers belong to the same domain and I am using domain Administrator login in both VMs. I have also added an Inbound rule to allow access to port 5051,5502, 5527 & 5528 to the Firewall settings in IQService server

Also aggregation works in the source

Thanks both for your input