Hi M, When creating the certificate chain, do not use the server certificate itself. Only use the  intermediate CA certificate(s) and the root certificate.
Hi, I am trying to configure a Unity VSA (5.0.5.0.5.002) to use LDAPS against two of my Windows 2019 DC's, as a test, and I am getting the error "The certificate chain is not valid. (Error Code:0x6000947)". I cannot find any directly helpful information for the specific error. [IMAGE]                   I have other applications (vCenter Server, iDRAC) that are successfully authenticating against the same DC's via LDAPS, using the same certificate chain. The certificate chain I am trying to upload is as follows (this is from an isolated lab environment) :   Questions: 1) What issue exactly does Error Code:0x6000947 allude to? As far as I can see the certificate chain is good; so is it a key size or signature/hash type issue? I am using the same root/intermediate CA pair to sign the Unity webserver certificate for the UI and that works just fine. 2) I have collected the Unity's 'Service Information', but once I untar it all, there are 100's of different log files. Is there a specific log file I should be looking at for LDAP configuration issues? Can I increase the level of logging in the short term to capture more detail? 3) My W2K19 DC's each present different certificates for LDAP; assuming I can fix the chain issue, can I upload multiple server certificate chains or does the Unity expect all LDAPS servers to use the SAME certificate chain?  Any help or advice will be appreciated. Thanks, M  
Attempting to configure LDAPS - "The certificate chain is not valid. (Error 
Code:0x6000947)"