This document outlines the steps for how to configure SSL on AD. For changing password from HySecure client SSL certificate need to install on AD server. Because for changing AD user password via HySecure we need SSL port 636. So SSL should be configured on AD server.