> ## Documentation Index
> Fetch the complete documentation index at: https://infisical.com/docs/llms.txt
> Use this file to discover all available pages before exploring further.

# Azure ADCS connection

> Learn how to configure an Azure ADCS Connection for Infisical certificate management.

Connect Infisical to Microsoft Active Directory Certificate Services (ADCS) for automated certificate issuance and management.

## Prerequisites

* Microsoft Active Directory Certificate Services (ADCS) server running and accessible
* Domain administrator account with certificate management permissions
* Network connectivity from Infisical to the ADCS server
* ADCS web enrollment enabled on your server

## Connection setup

**1. Navigate to App Connections**

In Certificate Manager, navigate to the **App Connections** tab on the **Settings** page.

![App Connections Tab](https://mintlify.s3.us-west-1.amazonaws.com/infisical/images/app-connections/general/add-connection.png)

**2. Add Connection**

Select the **Azure ADCS (Web Enrollment)** option from the connection options modal.

![Select Azure ADCS Connection](https://mintlify.s3.us-west-1.amazonaws.com/infisical/images/app-connections/azure-adcs/azure-adcs-select-connection.png)

**3. Configure Connection Details**

**Configuration Tab:**

* **Name**: Friendly name for this ADCS connection (e.g., "Production ADCS")
* **ADCS URL**: Your ADCS HTTPS URL (e.g., `https://adcs.yourdomain.com/certsrv`) - only HTTPS is supported
* **Username**: Domain administrator username (format: `DOMAIN\username` or `username@domain.com`)
* **Password**: Password for the domain administrator account

**SSL Tab:**

* **SSL Certificate**: Optional PEM certificate for custom CA certificates or self-signed certificates
* **Reject Unauthorized**: Whether to reject connections with invalid SSL certificates (it's recommended to keep it enabled)

> [!NOTE]
>
> **Getting the SSL Certificate**: If your ADCS server uses a self-signed certificate or a certificate from a custom CA, you can obtain the certificate using OpenSSL or PowerShell:
>
> **Using OpenSSL:**
>
> ```bash theme={"dark"}
> openssl s_client -connect your-adcs-server:443 -showcerts
> ```
>
> **Using PowerShell (from inside your ADCS Server):**
>
> ```powershell theme={"dark"}
> Import-Module WebAdministration -ErrorAction SilentlyContinue
> $binding = Get-WebBinding -Protocol https -Port 443
> if ($binding -and $binding.certificateHash) {
>     $cert = Get-ChildItem -Path "Cert:\LocalMachine\My\$($binding.certificateHash)"
>     if ($cert) {
>         $certBase64 = [System.Convert]::ToBase64String($cert.RawData)
>         $certPem = "-----BEGIN CERTIFICATE-----`n" + ($certBase64 -replace '(.{64})', '$1`n') + "`n-----END CERTIFICATE-----"
>         Write-Output $certPem
>     }
> }
> ```
>
> Copy the certificate content (including `-----BEGIN CERTIFICATE-----` and `-----END CERTIFICATE-----` lines) and paste it into the SSL Certificate field.

And click **Connect to ADCS** to establish the connection.

![Connect to ADCS](https://mintlify.s3.us-west-1.amazonaws.com/infisical/images/app-connections/azure-adcs/azure-adcs-app-connection-form.png)

![Connect to ADCS - SSL](https://mintlify.s3.us-west-1.amazonaws.com/infisical/images/app-connections/azure-adcs/azure-adcs-app-connection-form-ssl.png)

**4. Connection Created**

Your **Azure ADCS Connection** is now available for use in your Infisical projects. ![Azure ADCS Connection Created](https://mintlify.s3.us-west-1.amazonaws.com/infisical/images/app-connections/azure-adcs/azure-adcs-app-connection-created.png)


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.