TANDBERG Gatekeeper User Manual page 38

TANDBERG Gatekeeper User Manual
6.2.4 Securing the LDAP connection with TLS
The traffic between the Gatekeeper and the LDAP server can be encrypted using Transport Layer
Security (TLS). To use TLS, the LDAP server must have a valid certificate installed so that the
Gatekeeper can verify the server's identity. For more information on setting up certificates using
common LDAP servers, see Appendix B. LDAPS uses port 636 as its default communications
port.
Using the terminal interface TLS can be enabled with the following command
xConfiguration LDAP Encryption: TLS
TLS can also be enabled via the web interface using the Gatekeeper Configuration Gatekeeper
page.
The Gatekeeper will now only communicate with the LDAP server using TLS. To verify the identity
of the LDAP server, the certificate of the Certificate Authority (CA) that issued the LDAP server
with its certificate must be uploaded to the Gatekeeper. To install the CAs certificate, navigate
to the Gatekeeper Configuration Files page and upload the CA certificate as a Trusted CA
certificate.
27