diff --git a/server-plugin/server-plugin-authenticator-ldap/src/main/java/io/onedev/server/plugin/authenticator/ldap/ActiveDirectoryAuthenticator.java b/server-plugin/server-plugin-authenticator-ldap/src/main/java/io/onedev/server/plugin/authenticator/ldap/ActiveDirectoryAuthenticator.java
index fb6cd0ff98..5326dbbff8 100644
--- a/server-plugin/server-plugin-authenticator-ldap/src/main/java/io/onedev/server/plugin/authenticator/ldap/ActiveDirectoryAuthenticator.java
+++ b/server-plugin/server-plugin-authenticator-ldap/src/main/java/io/onedev/server/plugin/authenticator/ldap/ActiveDirectoryAuthenticator.java
@@ -12,8 +12,10 @@ public class ActiveDirectoryAuthenticator extends LdapAuthenticator {
 
 	private String groupSearchBase;
 	
-    @Editable(order=100, name="LDAP URL", description=
-    	"Specifies LDAP URL of the Active Directory server, for example: <i>ldap://ad-server</i>, or <i>ldaps://ad-server</i>")
+    @Editable(order=100, name="LDAP URL", description = "" +
+			"Specifies LDAP URL of the Active Directory server, for example: <i>ldap://ad-server</i>, or <i>ldaps://ad-server</i>. " +
+			"In case your ldap server is using a self-signed certificate for ldaps connection, you will need to " +
+			"<a href='https://docs.onedev.io/administration-guide/trust-self-signed-certificates' target='_blank'>configure OneDev to trust the certificate</a>")
     @NotEmpty
 	@Override
 	public String getLdapUrl() {
diff --git a/server-plugin/server-plugin-authenticator-ldap/src/main/java/io/onedev/server/plugin/authenticator/ldap/LdapAuthenticator.java b/server-plugin/server-plugin-authenticator-ldap/src/main/java/io/onedev/server/plugin/authenticator/ldap/LdapAuthenticator.java
index 150997e93a..20bc02a8ad 100644
--- a/server-plugin/server-plugin-authenticator-ldap/src/main/java/io/onedev/server/plugin/authenticator/ldap/LdapAuthenticator.java
+++ b/server-plugin/server-plugin-authenticator-ldap/src/main/java/io/onedev/server/plugin/authenticator/ldap/LdapAuthenticator.java
@@ -49,8 +49,10 @@ public class LdapAuthenticator extends Authenticator {
     
     private GroupRetrieval groupRetrieval = new DoNotRetrieveGroups();
     
-    @Editable(order=100, name="LDAP URL", description=
-        	"Specifies LDAP URL, for example: <i>ldap://localhost</i>, or <i>ldaps://localhost</i>.")
+    @Editable(order=100, name="LDAP URL", description="" +
+			"Specifies LDAP URL, for example: <i>ldap://localhost</i>, or <i>ldaps://localhost</i>. In case" +
+			"your ldap server is using a self-signed certificate for ldaps connection, you will need " +
+			"to <a href='https://docs.onedev.io/administration-guide/trust-self-signed-certificates' target='_blank'>configure OneDev to trust the certificate</a>")
     @NotEmpty
 	public String getLdapUrl() {
 		return ldapUrl;