See below for editing the configuration of an Active Directory in Entrust PKIaaS.

To edit an Active Directory configuration

1. Click  Agents > WSTEP > Root Active Directories in the sidebar.
2. Click the ...  three dots line for an Active Directory and select Edit
3. Update the following configuration settings.
   • Domain Name
   • Username
   • Password
   • DNS
   • Certificate Authority
   • LDAPS Trusted Certificates

Domain Name

The name of the root domain of the Microsoft Active Directory forest that was used when Preparing the Active Directory forest for WSTEP. 

• If an Active Directory with the same name exists and is linked to another agent, the wizard will display an error message.
• If an Active Directory with the same name exists but is not linked to another agent, the wizard will display a confirmation request to load the Active Directory configuration.
• The value used for the domain name should not be an IP address, nor should it be the FQDN of a domain controller.

Username

The user logon name obtained when Creating a PKIaaS WSTEP Service Account. This parameter supports the two formats described in:

https://learn.microsoft.com/en-us/windows/win32/secauthn/user-name-formats

For example:

Password

The password selected when Creating a PKIaaS WSTEP Service Account.

DNS

The DNS of the Active Directory you configured in Preparing the Active Directory forest for WSTEP. Use the following syntax to set this value.

Where 

• <machine> is the domain name or IP address of the DNS server.
• <port> is the port of the DNS service.

Certificate Authority

The Certificate Authority you configured in Configuring an Entrust PKIaaS issuing CA for WSTEP.

LDAPS Trusted Certificates

The root CA certificate of the LDAPS TLS certificates chain. The PKIaaS Virtual Machine will use this root CA certificate for validating connections with the Active Directory LDAPS service. Click Add Certificate to import one or more root CA certificates.