Help Center
Help Center
Getting Started and Quick Guides
Users
Administrators
🧩Area: Administrators
🎓 Administrator Onboarding
SecuMails
Outlook Add-In (Classic Outlook)
Outlook Add-In (new Outlook)
FTAPI Gateway
Trust Networks
SecuRooms
SecuRooms Drive
SecuForms
Server Settings
General Server Settings
📋 User Account Cleanup: Automatically deactivate or delete inactive accounts📋 User Management: Creating user accounts manually, automatically, or via AD📋 User management: Assigning and changing group memberships📋 User Management: Setting a password for "unregistered" usersEmail delivery: Sender of delivery notifications📋 Email delivery: Emails are not arriving or are landing in spam (DNS configuration)📋 G.Data Virus Scanner: Configuring MIME types for allowed file types📋 Group Management: Configuring Permissions, Licenses, and Priority Rules📋 LDAP: Exporting LDAPS certificate via MMC or OpenSSL📋 Limits: Configuring size and download limits per group and product❓MySQL: Upgrade from 8.0 to 8.4📋 OpenSSL: Converting certificate formats (.cer, .crt, .pem) to .pfx📋 SecuPass: Activate and set up end-to-end encryption (E2E)📋 SecuPass: Resetting end-to-end encryption📋 Security: Restrict available security levels per group📋 SSO: Renewing SAML credentials for a Relying Party (RP)📋 SSO: Setting up SAML Single Sign-On with ADFS📋 SSO: Exporting and updating the SAML certificate (metadata) from IdP📋 SSO: Adjusting token lifetime on ADFS server via PowerShell and console📋 System: Setting up a custom SMTP relay for deliveries and notifications📋 System: Configuring Login Disclaimer (Terms of Use) for Users📋 Windows: Create a .p12 / .pfx certificate from a .p7b file
Templates
Miscellaneous
Download Center
Changelog

📋 LDAP: Exporting LDAPS certificate via MMC or OpenSSL

This article provides instructions for administrators on how to export the LDAP(S) certificate using the Microsoft Management Console (MMC) or the OpenSSL tool to provide it for updating on the FTAPI server.

Exporting LDAP(S) certificate

If user login via LDAP is no longer possible, the stored certificates may differ due to a one-sided renewal. To provide the new certificate to the FTAPI server, proceed as follows:

Please note that certificates may be automatically renewed a few weeks before the expiration date, depending on the certificate type you have chosen.

Certificate export via Microsoft Management Console (MMC)

  1. Open certificate store: Open the Microsoft Management Console (MMC) on the Domain Controller. Add the "Certificates" snap-in for the computer account.
  2. Navigate to "Certificates (Local Computer)" > "Personal" > "Certificates". 
     
  1. Select certificate: Find the certificate used for LDAPS. Usually, this is a certificate issued for the fully qualified domain name (FQDN) of the Domain Controller.
  2. Export certificate: Right-click the certificate and select "All Tasks" > "Export".
  3. Follow the instructions of the Certificate Export Wizard. Select the option **not** to export the private key.
  4. Select the desired file format (PEM format, Base-64 encoded X.509).
  5. Specify a storage location and a file name and click "Finish" to complete the export process.

Determining the certificate via OpenSSL (optional)

Start "openssl.exe" with the parameter s_client -showcerts -connect your.domain.controller:636

The command simulates an SSL handshake with the Domain Controller and outputs, among other things, the certificate used:

Copy the lines from -----BEGIN CERTIFICATE----- to -----END CERTIFICATE----- into a file.

Currently, the LDAP certificate can only be imported by FTAPI support. Please create a ticket if necessary; support will then provide you with a SubmitBox link where you can securely upload the aforementioned file.

Related articles

📋 SSO: Exporting and updating SAML certificate (metadata) from IdP

Was this article helpful?

English
Powered by Product Fruits