AFW-323 — Directory sync: TLS failed

Area: Identity & connectors · All support codes · Reference table

Why this happened

The LDAPS server certificate failed validation — usually a private AD CS root the agent has not been given.

Fix

Paste your AD CS root certificate into Identity → Directory (TLS CA), or switch to port 389 with LDAPS off.

---

If the fix doesn't resolve it, file a support ticket from the console — your workspace's diagnostics snapshot is attached automatically, so this code reaches support with its context.