Configure LDAP SSL in Windows 2012

1. From the Server Manager Dashboard click Add roles and features.

     On the Add Roles and Features Wizard, read the Before you begin information and click Next.

2. On the Select Installation Type step, select the Role-based or feature-based installation option
    and click Next.

3. On the Select Destination Server step, enable the Select a server from the server pool option,
    select your server, and click Next.

 

4. On the Select Server Roles step, select the Active Directory Certificate Services option and
    click Next. 

5. On the Add Roles and Features Wizard notice, click Add Features to install roles, services, and
    features that are needed by Active Directory Certificate Services.

6. On the Select Features step, enable the .NET Framework 3.5 Features option (if it is not already
     installed, then leave it as it is). Active Directory 2012 requires .NET Framework 3.5 be installed.
     Click Next.

7. On the Active Directory Lightweight Directory Services step, click Next.

8. On the Select role services step, Select Certification Authority and Certification Authority Web
    Enrollment options, click Next.

9. On the Confirm Installation Selections step, review your selections, and click Install

10. Wait for successful completion of the installation. Do not close the wizard. On successful
        completion, click the Configure Active Directory Certificate Services on the destination
        server. 

11. Above step will open the AD CS Configuration popup, On the Credentials step keep current user
      or change the credentials, click Next.

12. On the Role Services step, Select Certification Authority and Certification Authority Web
       Enrollment, click Next.

 

13. On the Setup Type step, Select Enterprise CA option, click Next.

14. On the CA Type step, Select Root CA option, click Next.

15. On the Private Key step, Select Create a new private key option, click Next.

16. On the Cryptography for CA step, keep default options, click Next.

17. On the CA Name step, keep default name, click Next.

18. On the Validity Period step, Fill validity as per your requirement (default 5years), click Next.

19. On the CA Database step, Note the DB path, click Next.

20. On the Confirmation step, review your options, click Configure.

21. On Configuration succeeded, click close and then reboots the system.