Certificate Management

This section allows you to manage the certificates used for LDAP integration.

Initial configuration

If you use a secured LDAPS protocol or the StartTLS option, you must import the root CA certificate to establish a secure connection. It ensures that ARTESCA recognizes and trusts the LDAP server.

Warning

Importing the LDAP server certificate directly is not recommended. If that certificate is renewed, authentication can fail unless you re-import or update the trusted certificate.

Monitoring

Regularly monitor the expiration date of the LDAP server certificate. If the certificate is about to expire, you must import the new certificate.

Replace a certificate

  1. Click Identity on the top menu and go to Identity providers on the sidebar menu.

  2. Select your LDAP-based IdP from the list.

  3. Go to Connection and Authentication tab.

  4. Replace the old certificate by dragging and dropping, clicking Browse, or pasting it as text in the text field.

Verify the certificate

Replacing a certificate will automatically trigger a Test Connection to verify the new certificate.