You must export the CA certificate from the Active Directory server and import it to your PAM manager server to enable communication over Secure Sockets Layer (SSL).
Log in to Active Directory domain server as a domain administrator.
In the Active Directory server, launch the Certificate Authority application using Start | Run | certsrv.msc.
Right click the Certificate Authority you created and select Properties.
Click General > View Certificate.
Select Copy to File from the Details tab.
Follow the wizard prompts and select the DER Encoded binary X.509 (.cer) format.
Click browse and specify a path and filename to save the certificate.