Secure LDAP Auth with SSL Cert

I’m wanting to setup secure LDAP authentication with an external service. They currently use unsecured LDAP. The manufacturer admits they way it had been originally implemented exposes credentials via packet capture. I’ve reviewed: https://support.microsoft.com/en-us/help/321051/how-to-enable-ldap-over-ssl-with-a-third-party-certification-authority Their local domain is a *.local. The product manufacturer requires an SSL certificate that is signed by a valid certificate authority.…