Using ACM Private CA as Microsoft enterprise CA server

Question

Per https://docs.aws.amazon.com/directoryservice/latest/admin-guide/ms_ad_ldap_server_side.html, in order to enable LDAPS for ManagedAD, I need a Microsoft enterprise CA server. Can ACM Private CA be used as a Microsoft enterprise CA server or do I need to set one up on an EC2 instance?

Answer

Howdy!

AWS ACM-PCA won't suffice here. Looking through the AWS MAD documentation on creating a template in your CA, you need to create a 'Kerberos Authentication' template. This is not a [supported template variety in ACM-PCA](https://docs.aws.amazon.com/acm-pca/latest/userguide/UsingTemplates.html#template-varieties).

Using ACM Private CA as Microsoft enterprise CA server

Contenido relevante