Has anybody used AD CA to secure an Unraid server?

Greetings,

I've been trying to use my lab Windows 2019 AD CA to generate and use certificates for my Unraid server. Unfortunately, it's not going well at all. (It feels like when I need to t/s Elite Dangerous)

1. I've created a certificate request using a Web Template. During the request I've added the FQDN, DNS and DNS IP.

2. I've exported the Base 64 server cert as well as the private pfx key.

3. I've exported the CA cert using Base 64.

4. On the Unraid server I've used OpenSSL to convert the pfx to a readable pem file.

5. I've cat the three files together private key->server key->Server CA into a pem file and named it SERVER_unraid_bundle.pem. Then copied the file to /boot/config/ssl/certs

For whatever reason this doesn't work. I got all this off the internet, and there's a lot of information noise about this. It's been hard for me to sift through it. I suspect I'm going about this all wrong.

This is what I end up seeing in the manage section;

Self-signed or user-provided certificate:

/boot/config/ssl/certs/SERVER_unraid_bundle.pem

Certificate URL: Server.mydomain.com

Certificate issuer: DC=com, DC=mydomain, CN=my_ca_server

Certificate expiration: Thu 21 Sep 2028 11:12 AM

CA-signed certificate file: Not present

When I turn on SSL the cert shows the following:

ISSUSED TO:

Common Name (CN) Server.mydomain.com

Organization (O) <Not Part Of Certificate>

Organizational Unit (OU) <Not Part Of Certificate>

ISSUED BY

Common Name (CN) my_ca_server

Organization (O) <Not Part Of Certificate>

Organizational Unit (OU)<Not Part Of Certificate>

So I'm really at a loss here. I don't understand what I'm doing wrong or how I can use my Windows Server CA to secure Unraid.

As far as I can tell using Windows isn't a common practice for Unraid. (If I assumed correctly) So if anybody has any suggestions, I wouldn't be such a Sad Panda anymore.

Thanks for any feedback.