Microsoft AD CS
Connects the CLM to an Enterprise CA (Active Directory Certificate Services) for issuing internal certificates and discovering issued certificates.
Prerequisites
Before registering the integration, make sure that:
- A Windows CLM Agent is installed and online on a server with network access to the AD CS server
- The agent's service account has the necessary permissions on AD CS
Detailed requirements
See the [Install the Agent — Windows](/guias/agente/windows) guide for the complete installation requirements, service account permissions, and network configuration.
Register
- Go to Integrations in the sidebar menu
- Find the ADCS card and click + Configure
- Fill in the fields:
| Field | Description |
|---|---|
| Integration Name | Name to identify the integration in the CLM, e.g. ADCS-Production |
| Windows Agent | Select the installed Windows agent with access to the CA server |
| CA Server FQDN | FQDN or IP address of the AD CS server, e.g. WIN-9DTEAAV79IJ.lab2.com |
- Click Test connection to validate
The test checks four conditions:
| Check | Description |
|---|---|
| Network Reachable | The agent can reach the CA server on the network |
| CertSvc Responds | The certificate service is responding |
| Can Authenticate | The agent's service account can authenticate to the CA |
| Can Enumerate | The account has read permission to list certificates |
- If the test passes, click Save changes
If the test fails, check: network connectivity between the agent and the CA server (RPC ports), the service account's permissions on AD CS, and whether the `CertSvc` service is running on the server.
Refresh templates
Click Refresh in the Refresh templates section to reload the certificate templates published on the CA. Do this whenever new templates are published or modified in AD CS.
Edit
Click the integration card to open the edit modal. You can change the name, the linked agent, and the CA server FQDN.
Delete
Click Delete inside the edit modal. Remove links with certificates and discovery jobs before deleting.