I'm trying to use ldaps in the screen where you add Identity Sources for SSO Configuration. The system is a vCenter 5.1 Appliance although I'm guessing the question is the same in Windows. When I try to use ldaps:// in the URL it asks for a certificate to continue. I'm not sure why it needs a certificate to make a SSL connection with my domain controller since the domain controller will provide it anyway. Also, if I do try to select a certificate it greys out any normal type of certificate file so that I cannot try things out. This includes the extensions of .pem, .crt, .key, and .pfx. Anyone know what its looking for?