Import the LDAPS TLS certificate chain into the GPO previously created in Creating a Group Policy Object for the LDAPS TLS certificate chain.

To import the certificate chain into the GPO

1. Log into the root Active Directory of the forest as an Active Directory administrator.
2. Select Start > Windows Administrative Tools > Group Policy Management to open the Group Policy Management dialog.
   
3. Right click the Group Policy Object.
4. Select Edit to display the Group Policy Management Editor.
   
5. Navigate to Computer Configuration > Policies > Windows Settings > Security Settings > Public Key Policies.
6. Right click Trusted Root Certificate Authorities and select Import.
   
7. In the Certificate Import Wizard, click Next and select the root CA certificate file to import.
8. Click Next to reveal the Certificate Store settings.
   
9. Verify the selected certificate store is Trusted Root Certification Authorities.
10. Click Next to display the Completing the Certificate Import Wizard.
11. Click Finish to return to the to the Group Policy Management dialog.
12. In the Group Policy Management dialog, navigate to Computer Configuration > Policies > Windows Settings > Security Settings > Public Key Policies.
13. Right-click Intermediate Certificate Authorities and select Import  to display the Certificate Import Wizard.
14. Click Next and select the issuing CA certificate file to import.
15. Click Next to reveal the Certificate Store settings.
16. Verify the selected certificate store is Trusted Root Certification Authorities
17. Click Finish.
18. Select File > Exit to close the Group Policy Management Editor.