# SSL/TLS How-to for Active Directory LDAPS User source **URL:** \ **Category:** Ignition\ **Created:** [September 13, 2019, 5:45am UTC](https://forum.inductiveautomation.com/t/ssl-tls-how-to-for-active-directory-ldaps-user-source/28235 "2019-09-13T05:45:04Z")\ **Posts on this page:** 1\ **Showing post:** 28
**Author:** ![david.wooffindin](https://avatars.discourse-cdn.com/v4/letter/d/f475e1/32.png) [@david.wooffindin](https://forum.inductiveautomation.com/u/david.wooffindin)\ **Post date:** [December 23, 2021, 9:40am UTC](https://forum.inductiveautomation.com/t/ssl-tls-how-to-for-active-directory-ldaps-user-source/28235/28 "2021-12-23T09:40:30Z")
Hello all, I have managed to get LDAPS communication working fine by setting up the following: - Using a GPO (or whatever automated process) I am getting our root and intermediate domain controller certificates (in .cer format ) from a central infrastructure share and copying them into the supplemental folder. This ensures that they are loaded by 8.x gateways and the domain itself is trusted. I use Keystore Explorer to check in the embedded java CACERTS store and I see the domain certificates correctly imported. I am also adding a System environment variable : “JAVA\_TOOL\_OPTIONS=-Djavax.net.ssl.trustStoreType=WINDOWS-ROOT” and with all the above done it works seamlessly. Not sure if all the above is required but it works this way 🙂 So the LDAPS part is good. Now i’m looking at the SSL part - i have got it working for one gateway but am looking for a more global approach to manage multiple servers. If anything comes from that topic i’ll post a link to it here for future hunters to follow the breadcrumbs 🙂 Thanks all for your help. If you’re having issues getting LDAPS working, reply here and someone will help !! --- _[View the full topic](https://forum.inductiveautomation.com/t/ssl-tls-how-to-for-active-directory-ldaps-user-source/28235)._