# SSL/TLS How-to for Active Directory LDAPS User source

**URL:** <https://forum.inductiveautomation.com/t/ssl-tls-how-to-for-active-directory-ldaps-user-source/28235>\
**Category:** Ignition\
**Created:** [September 13, 2019, 5:45am UTC](https://forum.inductiveautomation.com/t/ssl-tls-how-to-for-active-directory-ldaps-user-source/28235 "2019-09-13T05:45:04Z")\
**Posts on this page:** 1\
**Showing post:** 35

<div class="post-metadata">

**Author:** ![michael.flagler](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/michael.flagler/32/26272_2.png) [@michael.flagler](https://forum.inductiveautomation.com/u/michael.flagler)\
**Post date:** [August 22, 2025, 4:25pm UTC](https://forum.inductiveautomation.com/t/ssl-tls-how-to-for-active-directory-ldaps-user-source/28235/35 "2025-08-22T16:25:46Z")

</div>

I just tried this and was hoping I could add it in the wrapper.java.additional.X options in ignition.conf, but didn’t have any luck putting it there. But adding it to the machine/system environment variables worked perfectly!

For easier copy/paste for others of the variable and its value:

```python
JAVA_TOOL_OPTIONS

```

```python
-Djavax.net.ssl.trustStoreType=WINDOWS-ROOT-LOCALMACHINE

```

Or if you want to just do it from a command prompt (the /f forces it to overwrite without prompting - so you can remove it if you want to be cautious):

```python
reg add "HKLM\SYSTEM\CurrentControlSet\Control\Session Manager\Environment" /v "JAVA_TOOL_OPTIONS" /t REG_SZ /d "-Djavax.net.ssl.trustStoreType=WINDOWS-ROOT-LOCALMACHINE" /f

```

---

_[View the full topic](https://forum.inductiveautomation.com/t/ssl-tls-how-to-for-active-directory-ldaps-user-source/28235)._