Manual deployment of certificates for secure LDAP SSL configuration (4378513)

For the new secure LDAP feature in Change Auditor, we decided some helpful information we had in our user documentation would be better suited for a KB.

In order for Change Auditor to be able to function in an LDAPS environment, the CA coordinator hosts, and AD Certificate Services will need to have certificates configured and imported

Outlined below, are the steps necessary for a simple approach to manually deploying certificates for SSL configuration which is also a requirement for foreign forest configurations:

1. Export a public-key copy of the Active Directory Certificate Services trusted root certificate, which is located on the Certificate Services host DC in "Local Computer/Trusted Root Certification Authorities" folder (Use the certlm.msc snap-in). It is named "domain-machine-CA" where "domain" is the netBIOS name of the domain, and "machine" is the netBIOS name of the domain controller hosting Certificate Services. (i.e. MyDomain-MyCoordinatorHostName-CA)
2. Distribute the public-key copy of the coordinator forest Certificate Services trusted root certificate to the "Local Computer/Trusted Root Certification Authorities" folder on each host computer in the foreign forest that will host a Change Auditor agent (Use the certlm.msc snap-in).
3. Make a public-key copy of the foreign forest Certificate Services trusted root certificate and import the Trusted Root Certification Authorities folder of each Change Auditor coordinator, Windows Client or Web Client host in the coordinator forest. (Use the certlm.msc snap-in)