So far I installed the "Active Directory Certificate Services" Confirmed Domain Controller authentication was present in both Certificate Templates and CA -> Certificate templates.
I created a new cert in MMC under personal, exported this and used keytool to create a keystore keytool -import -file ldapcert.der -keystore ldap.truststore Is this all that is required?
