Setting Up Microsoft Active Directory Server

The Microsoft Active Directory Server can be used with EnterpriseOne only if it is enabled for using SSL.

To set up the Microsoft Active Directory Server and enable it for using SSL, perform the following steps:

Note: Make sure that you have the administrator password for the server. After you install the Active Directory and start the server, you cannot log in if you do not have the administrator password.

1. Install Active Directory Domain Services and promote this server to a domain controller by following the steps explained in the Installing AD DS by using Server Manager section.
2. On the Server Manager page, click the Manage menu and select Add Roles and Features.
3. Install Active Directory Certificate Services by selecting the Certificate Authority option.
4. To configure the CA Certificate, click Create Active Directory Domain Services.
5. Retain the default values on all the windows except in the Cryptography for CA window. In the Cryptography for CA window, select the value for the Hash Algorithm as SHA256 and click Next.
6. Click the Configure button on the last window to complete configuring the CA Certificate.
7. Install the latest Windows Security Updates (dated March 10, 2020).

For more information see:

1. LDAP channel binding and signing for Microsoft Active Directory
2. LDAP signing