By default, the System certificates used during the installation of an ICE Server installation are also applied for LDAP. This feature can be disabled, allowing for the configuration of LDAP-specific CA certificates. Refer to the TLS Certs section of the ICE Server Installation Guide for instructions.

If this feature is disabled, then you must upload the LDAP Server's identity certificate in .pem format. For instructions on creating LDAP certificates, see https://learn.microsoft.com/en-us/troubleshoot/windows-server/active-directory/enable-ldap-over-ssl-3rd-certification-authority.