Enable basic protection before configuring LDAP certificate properties. See Using Basic TLS Protection.