<div>
in case you are interested in openssl<br />
<br />
- create wildcard: <a href="http://www.justinsamuel.com/2006/03/11/howto-create-a-self-signed-wildcard-ssl-certificate/" rel="ugc">http://www.justinsamuel.com/2006/03/11/howto-create-a-self-signed-wildcard-ssl-certificate/</a><br />
<br />
- commandline for client to do SNI: <a href="http://stackoverflow.com/questions/7497088/openssl-tls-extension-support-configuration-server-name-indication" rel="ugc">http://stackoverflow.com/questions/7497088/openssl-tls-extension-support-configuration-server-name-indication</a>
</div>


in case you are interested in openssl

- create wildcard: http://www.justinsamuel.com/2006/03/11/howto-create-a-self-signed-wildcard-ssl-certificate/ [http://www.justinsamuel.com/2006/03/11/howto-create-a-self-signed-wildcard-ssl-certificate/]

- commandline for client to do SNI: http://stackoverflow.com/questions/7497088/openssl-tls-extension-support-configuration-server-name-indication [http://stackoverflow.com/questions/7497088/openssl-tls-extension-support-configuration-server-name-indication]

<div>
you can, but if this is for Internal access to AD, I would usually setup an internal CA root server and use domain certificates, they cost a little less...
</div>


you can, but if this is for Internal access to AD, I would usually setup an internal CA root server and use domain certificates, they cost a little less...

<div>
Exactly what I was looking for.
</div>


<div>
<div class="content wysiwyg-content">
I'm wondering if it's possible to enable LDAP over SSL in Active Directory using a wildcard cert issued from a third party, instead of a per-server cert as listed in the below KB. &nbsp;I'm also wondering how to create a wildcard CSR for the active directory domain. &nbsp;Thanks in advance!<br />
<br />
How to enable LDAP over SSL with a third-party certification authority:<br />
<a href="http://support.microsoft.com/kb/321051" rel="ugc">http://support.microsoft.com/kb/321051</a>
</div>
</div>


I'm wondering if it's possible to enable LDAP over SSL in Active Directory using a wildcard cert issued from a third party, instead of a per-server cert as listed in the below KB.  I'm also wondering how to create a wildcard CSR for the active directory domain.  Thanks in advance!

How to enable LDAP over SSL with a third-party certification authority:
http://support.microsoft.com/kb/321051

Enable LDAP over SSL - Using Wildcard Cert?

Active Directory (AD) is a Microsoft brand for identity-related capabilities. In the on-premises world, Windows Server AD provides a set of identity capabilities and services, and is hugely popular (88% of Fortune 1000 and 95% of enterprises use AD). This topic includes all things Active Directory including DNS, Group Policy, DFS, troubleshooting, ADFS, and all other topics under the Microsoft AD and identity umbrella.

Active Directory

Windows Server 2008 and Windows Server 2008 R2, based on the Microsoft Vista codebase, is the last 32-bit server operating system released by Microsoft. It has a number of versions, including including Foundation, Standard, Enterprise, Datacenter, Web, HPC Server, Itanium and Storage; new features included server core installation and Hyper-V.

Windows Server 2008

Encryption is the process of encoding messages or information in such a way that only authorized parties can read it. In an encryption scheme, the intended communication information or message, referred to as plaintext, is encrypted using an encryption algorithm, generating ciphertext that can only be read if decrypted. For technical reasons, an encryption scheme usually uses a pseudo-random encryption key generated by an algorithm. An authorized recipient can easily decrypt the message with the key provided by the originator to recipients, but not to unauthorized interceptors.