Install the certificate to support LDAPS

When you set up LDAP, you specified whether or not to use SSL for LDAP (LDAPS). If using SSL, you must install the LDAP SSL certificate. Before you can add the SSL certificate, you must Configure LDAP for Active Directory.

You must have the SSL certificate before you start. For more information on obtaining an SSL certificate, see Configure SSL (secure socket layers).

To add the SSL certificate for LDAP:

1. Follow the instructions from your certifying authority to obtain the certificate. This is usually sent by email or available for download.

2. Copy the certificate to ThoughtSpot:

    $ scp <certificate> admin@<IP_address>:<path>
   

3. Log in to the Linux shell using SSH.

4. Change directories to where you copied the certificate:

    $ cd <path>
   

5. Run the command to configure SSL for LDAP, designating an alias for this certificate using the <name> parameter:

    $ tscli ldap add-cert <name> <certificate>