Adding an LDAPS certificate

You can configure an identity source such as Active Directory by adding an LDAPS certificate to the keycloak pod.

1. Using an SSH client such as PuTTy, log on to the UCP Advisor VM.
2. Using an SFTP client such as WinSCP, copy the LDAPS certificate to the /var/ucpadvisor/keycloak/keycloak-db folder.
   Note: Only certificates with a .cer file extension are supported.
3. Navigate to the scripts folder. Enter:

   cd /var/ucpadvisor/scripts

4. Run the AddLdapsCertificateToKeycloak.sh script. Enter:

   ./AddLdapsCertificateToKeycloak.sh

5. When prompted, enter the LDAPS certificate name that you copied above (do not include the .cer file extension). This restarts the keycloak pod.