Dell Wyse Management Suite Version 3.1 Administrator's Guide

Configure secure LDAP or LDAPS setup

To request the Root certificate from the Active Directory Certificate Services and configure a secure LDAP or LDAPS setup, do the following:

1. Go to the Active Directory domain server.
2. Go to Start > Run.
3. Enter mmc and click Ok.
   The Console1 window is displayed.
4. Go to File > Add or Remove Snap-ins.
5. Add the certificates to the local system and click Ok.
6. Expand the Personal folder in the left pane.
7. Right-click certificates and go to All Tasks > Request New Certificate.
   Certificate Enrollment window is displayed.
8. Click Next.
9. In the Select Certificate Enrollment Policy tab, click Next.
10. Select Domain Controller and click Enroll.
    The domain certificate is installed on your domain controller.
11. Click Finish.
    The certificate issued to your domain controller is displayed on your certificate page.
12. Right-click the certificate and export the certificate to your desktop.
13. Import the AD domain server certificate into Wyse Management Suite java key store manually to the Wyse Management Suite server setup. To import the certificate, do the following:
    1. Go to the server where Wyse Management Suite is installed.
    2. Open Command Prompt and run the command <C:\Program Files\DELL\WMS\jdk-11.0.7\bin>keytool.exe> -importcert -alias <certificate name> -keystore "<C:\Program Files\Dell\WMS\jdk-11.0.7\lib\security\cacerts>" -storepass changeit -file "C:\<certificate name>.
14. After the certificate is installed, restart the Wyse Management Suite Tomcat Service.
15. Log in to the Wyse Management Suite server.
16. Go to Portal Administration > Active Directory (AD).
17. Click the Add AD Server Information link.
18. Enter the AD domain name.
19. Enter the server URL as ldaps://hostname.domain.com. For example, ldaps://WMS-DC97.WMSAD97.com.
20. Enter the port name as 636.
21. Click Save.
22. Click Import.
23. Enter the username and password.
24. Click Login.
25. On the User Group page, click Group name and enter the group name.
26. In the Search field, type the group name that you want to select.
27. Select a group.
    The selected group is moved to the right pane of the page.
28. In the User Name Contents field, enter the username .
29. Click Import Users or Import Groups.
    The Wyse Management Suite portal displays a confirmation message with the number of imported active directory users. The imported active directory users are listed at Users tab > Unassigned Admins.