Configure Active Directory for the CloudLink encryption keystore You must deploy a Windows Server that is accessible by CloudLink Center to use Active Directory to store CloudLink encryption keys. This procedure shows you how to configure Active Directory for the CloudLink encryption keystore on a Windows Server that is configured as a domain controller. About this task You must provide the hostname of the Windows Server during configuration. You also must add your DNS server to CloudLink Center. For more information, see Domain Name System servers in CloudLink. Procedure Set up the Organization unit on Windows Server: On the Windows taskbar, click Start > All Programs > Administrative Tools, and then select Active Directory Users and Computers. Create an organization unit by expanding your domain name, and then right-click New > Organizational Unit. Enter a Name (for example, CloudLink_OU). Right-click the Organization Unit (for example, CloudLink_OU), and select New > Group. Enter the Group Name (for example, CloudLink_Group). Select Global and Security. Create a bind user: Right-click the Organization Unit (for example, CloudLink_OU), and select New, User. Enter the First Name (for example, Cloud), Last Name (for example, Link), and login name. Click Next. Type the Password, and then click Finish. Right-click the Organization Unit (for example, CloudLink_OU), and then select Delegate Control. Click Next to follow setup wizard. Click Add and enter the CloudLink group name (for example, CloudLink_Group). Click OK, and then click Next. Select Create a custom task to delegate, and then click Next. Select This folder, existing objects in this folder, and creation of new objects in this folder, and then clickNext. Select Full Control, and then click Next. Click Finish. Add the bind user to the security group: Double-click Security Group. Click the Members tab. Click Add. Type the bind user name. Click OK. Record the DN of CloudLink: Click Start, and then select Run. Type cmd, and then click OK. Enter dsquery OU (Support tool is required) and record the DN (for example, OU=CloudLink_OU,DC=company,DC=com).