Step 1: Installing the Jamf AD CS Connector for Inbound Communication Mode

To integrate Jamf Pro with AD CS, you must install the Jamf AD CS Connector on a Windows server. The connector runs as a service that allows Jamf Pro to communicate with the AD CS certificate authority server.

When configured for inbound communication mode, the installer generates the client and server certificates required to secure communication with Jamf Pro. Both certificates are required when configuring Jamf Pro to communicate with the AD CS Proxy Service. Additional components needed by the connector are also installed. For more information, see Components Installed for Inbound Communication Mode.

Note:

PowerShell has a security setting that does not allow the execution of scripts if they are not digitally signed. You can get the setting by executing the following command from the PowerShell prompt:

Get-ExecutionPolicy

If the returned value is RemoteSigned, scripts must be signed before they can be run. You can temporarily change this setting by executing the following command:

Set-ExecutionPolicy unrestricted

Log in to the Windows server that will host the Jamf AD CS Connector as a user with administrator privileges.
Click the following link to the Products area of Jamf Account, and then click Download: https://account.jamf.com/products/other/ad-cs-connector/download.
Extract the downloaded file.
Open a PowerShell console as an administrator and change the directory to the unzipped "ADCS Connector" folder (e.g., C:\Users\administrator\Downloads\adcs-connector-x.x.x\ADCS Connector).
Run the install-adcs-connector.ps1 PowerShell script with the parameters for your environment:
```
.\install-adcs-connector.ps1 -inbound -fqdn my.adcs-connector.url -jamfProDn JAMF_PRO_URL.jamfcloud.com -installIIS -configureHttps -cleanInstall
```
1. Replace my.adcs-connector.url with the fully-qualified domain name (FQDN) of the Jamf AD CS Connector server in your environment.
  
  Jamf Pro will use this URL to connect to the connector, so it must be reachable from your Jamf Pro server. The URL could be the external FQDN of a virtual IP address (VIP) or a reverse proxy/load balancer depending on your network configuration.
2. Replace JAMF_PRO_URL.jamfcloud.com with the FQDN of your Jamf Pro server.
  
  Important:
  After the connector installation is complete, take note of the client certificate password before closing the PowerShell window. This password is required to upload the certificate to Jamf Pro. If the password is unavailable, you must reinstall the connector to regenerate the password.

The Jamf AD CS Connector installs.

To complete the integration, configure the PKI certificates settings in Jamf Pro as described in Step 2: Configuring AD CS as a Certificate Authority for Inbound Communication Mode.