Passwordstate Documentation

Additional Certificate Considerations ​

If you intend to use additional domains that your Passwordstate Web Server is not a member of, then you will need to export the domain certificate from these domains, and import them onto your core Passwordstate web server. (Not the Password Reset Portal server)

This is required so the API can securely communicate with these other domains. If this is a requirement for you, please follow these steps:

Export the Domain CA Certificate ​

  1. On your server that has the CA installed, Click Start > Control Panel -> System and Security -> Administrative Tools -> Certificate Authority to open the CA Microsoft Management Console (MMC) GUI
  2. Right-click the CA server and select Properties

Export CA Certificate

  1. From the General tab, click View Certificate

Export CA Certificate 2

  1. On the Details tab, click Copy to File

Export CA Certificate 3

  1. Click Next

Export CA Certificate 4

  1. Choose Base-64 encoded X.509(.CER) and click Next

Export CA Certificate 5

  1. Save the certificate to your desktop, or somewhere local and click Next

Export CA Certificate 6

  1. Click Finish

Export CA Certificate 7

  1. Transfer the certificate to your Passwordstate web server and close all windows.

Importing the Certificate into your Passwordstate web server ​

  1. On your Passwordstate web server, open Certificate Manager by typing certlm.msc into your Run command bar
  2. Expand Trusted Root Certificate Authorities -> Certificates
  3. Right Click Certificates and select All Tasks -> Import

Import CA Certificate

  1. Click Next

Import CA Certificate 2

  1. Browse to the certificate and click Next

Import CA Certificate 3

  1. Click Next

Import CA Certificate 4

  1. Click Finish and then OK

Import CA Certificate 5

  1. This ends the import process, and your domains should now be able to securely communicate using LDAP over SSL