Cisco Systems 5.4.x Export the Root CA X.509 Certificate from Your Active Directory Server, Configure DMM to Trust the Active Directory Root CA

8-22
UserGuide for Cisco Digital Media Manager5.4.x
OL-15762-05
Chapter8 Authentication and Federated Identity
Procedures
• Configure LDAP (ActiveDirec tory) Settings, page 8-24
• Configure Federation Services for SSO, page 8-33
Export the Root CA X.509 Certificate from Your Active Directory Server
Procedure
Step1 Open a web browser on your Active Directory server and connect to http://localhost/certsrv.
Step2 Click Download a CA certificate.
Step3 Choose the current CA certificate.
Step4 Choose DER encoded.
The X.509 certificate that you export must be DER-encoded, and it can be binary or printable (Base64).
However, when you use Base64, the certificate file must include these lines:
-----BEGIN CERTIFICATE-----
-----END CERTIFICATE-----
Step5 Click Download CA certificate.
Step6 Save this certificate in a file.
For example, you might call the certificate ADcertificate.cer.
Step7 Stop. You have completed this procedure.
Configure DMM to Trust the Active Directory Root CA
Before You Begin
• Log in to DMM.
Procedure
Step1 Click Administration.
Step2 Choose Security > Authentication > Select Mode.