Administration Guide › Managing Users and User Groups › User Access Control › Active Directory › Security Considerations for Active Directory

Security Considerations for Active Directory

The Lightweight Directory Access Protocol (LDAP) is used to read from and write to the Microsoft Active Directory server. LDAP traffic is transmitted unsecured by default. This results in unsecured communication between the server and Microsoft Active Directory. You can make Microsoft Active Directory secure by using LDAP over Secure Sockets Layer (SSL)—LDAPS. You must install a properly formatted certificate from either a Microsoft certification authority or a non-Microsoft certification authority.

The requirements are described in a Microsoft Knowledge Base article.

Note: For more information about configuring Active Directory to transmit data securely, see the Knowledge Base article "How to enable LDAP over SSL with a third-party certification authority" on the Microsoft website. After you configure Active Directory to use LDAPS, you can transmit your data securely.