PMC Authentication Systems: Connecting Microsoft AD and Entra ID

PMC Authentication Systems: Connecting Microsoft AD and Entra ID

Overview

This article helps when an issue arises creating a new Authentication System in PMC (Administration > Authentication > Create). An administrator hits a certificate error during the connection test, or does not see the expected certificate in the CA certificate drop-down.

Environment

  1. NComputing PMC Endpoint Manager
  2. Authentication Systems feature, Server Type: Microsoft Active Directory or Microsoft Entra ID

Cause

For directory connections that validate a TLS/server certificate, PMC requires the relevant CA certificate to be uploaded as a file resource before it appears in the CA certificate drop-down on the Authentication System form. Environments that have configured authentication before often already have several CA certificates on file (per domain or site)

Notes
Note: Read through this document and you will see a drop-down menu in PMC where you can check for an existing Cert before assuming none exist and uploading a duplicate.

Resolution

Step 1: Upload the CA Certificate (if required for your Server Type)

  1. Navigate to Administration > Files. Under Upload File, open the File Type drop-down and select CA certificate in PEM format. Click Browse, select your certificate file, and upload it.

Step 2: Create the Authentication System

Go to Administration > Authentication and click Create. The Create Authentication System dialog has three sections:
  1. General Settings: Server type (Microsoft Active Directory / Microsoft Entra ID), Display name, Enable, Use global MFA settings, Use global security lockdown rules.
  2. Connection Settings: Server URL, Domain name, CA certificate (drop-down), Ignore certificate subject, Test connection.
  3. User Lookup Settings: User lookup base DN, PMC users group DN, Advanced user lookup settings (expandable).


Step 3: Select the CA Certificate and Complete Connection Settings

Select the uploaded certificate from the CA certificate drop-down (Microsoft Active Directory Server Type).

Navigate to Administration > Files.
  1. Under Upload File, open the File Type drop-down list and select CA certificate in PEM format.

  2. Click Browse, select the CA certificate file, and upload it successfully.

  3. Then set:

    • Ignore certificate subject: Enable if the server certificate's Subject CN does not match the server's FQDN.
    • User Lookup Base DN: This must be the DN of an Organizational Unit rather than a group.

Step 4: Test the Connection

Use the "Test connection" link in the dialog. A successful result confirms the certificate and connection parameters are valid but does not by itself grant any user access.

Step 5: Configure Authorization

  1. Navigate to Group Membership Rules.
  2. Map the appropriate Active Directory group to a local PMC group.
  3. Assign the desired User Role (for example, PMC Super User) to grant the appropriate administrative permissions.

Conclusion

Following these steps ensures PMC can successfully connect to your directory service and authenticate users through either Microsoft Active Directory or Microsoft Entra ID. Once the connection test passes and authorization is in place, directory users will have access to PMC.

For any questions, please contact NComputing Support.

Article #KB872

Last Edited: 07/02/2026