LDAPS and Self SIgned Certificates

You'll need to install your AD's self signed cert as a trusted cert on the gateway; see this thread for more details: