diff --git a/CMakeLists.txt b/CMakeLists.txt
index ed272a0..a0fc291 100644
--- a/CMakeLists.txt
+++ b/CMakeLists.txt
@@ -71,7 +71,7 @@ add_subdirectory( src )
 add_subdirectory( pics )
 add_subdirectory( cmdline )
 add_subdirectory( cert-updater )
-tde_conditional_add_subdirectory( BUILD_TRANSLATIONS po ) 
+tde_conditional_add_subdirectory( BUILD_TRANSLATIONS translations )
 
 
 ##### write configure files
diff --git a/src/CMakeL10n.txt b/src/CMakeL10n.txt
index 52503d7..fcf0eeb 100644
--- a/src/CMakeL10n.txt
+++ b/src/CMakeL10n.txt
@@ -1,3 +1,3 @@
 ##### create translation templates ##############
 
-tde_l10n_create_template( "kcmldap" )
+tde_l10n_create_template( "messages/kcmldap" )
diff --git a/translations/CMakeLists.txt b/translations/CMakeLists.txt
new file mode 100644
index 0000000..42b186a
--- /dev/null
+++ b/translations/CMakeLists.txt
@@ -0,0 +1 @@
+tde_auto_add_subdirectories()
diff --git a/translations/messages/CMakeLists.txt b/translations/messages/CMakeLists.txt
new file mode 100644
index 0000000..75c89f8
--- /dev/null
+++ b/translations/messages/CMakeLists.txt
@@ -0,0 +1,14 @@
+file( GLOB_RECURSE po_files RELATIVE ${CMAKE_CURRENT_SOURCE_DIR} *.po )
+string( REGEX REPLACE "[ \r\n\t]+" ";" _linguas "$ENV{LINGUAS}" )
+
+foreach( _po ${po_files} )
+  get_filename_component( _lang ${_po} NAME_WE )
+  if( "${_linguas}" MATCHES "^;*$" OR ";${_linguas};" MATCHES ";${_lang};" )
+    if( "${_po}" MATCHES "^([^/]*)/.*" )
+      string( REGEX REPLACE "^([^/]*)/.*" "\\1" _component "${_po}" )
+    else( )
+      set( _component "${PROJECT_NAME}" )
+    endif( )
+    tde_create_translation( FILES ${_po} LANG ${_lang} OUTPUT_NAME ${_component} )
+  endif( )
+endforeach( )
diff --git a/translations/messages/kcmldap.pot b/translations/messages/kcmldap.pot
new file mode 100644
index 0000000..24929d8
--- /dev/null
+++ b/translations/messages/kcmldap.pot
@@ -0,0 +1,456 @@
+# SOME DESCRIPTIVE TITLE.
+# FIRST AUTHOR <EMAIL@ADDRESS>, YEAR.
+#
+#, fuzzy
+msgid ""
+msgstr ""
+"Project-Id-Version: PACKAGE VERSION\n"
+"POT-Creation-Date: 2020-05-11 04:19+0200\n"
+"PO-Revision-Date: YEAR-MO-DA HO:MI+ZONE\n"
+"Last-Translator: FULL NAME <EMAIL@ADDRESS>\n"
+"Language-Team: LANGUAGE <LL@li.org>\n"
+"MIME-Version: 1.0\n"
+"Content-Type: text/plain; charset=UTF-8\n"
+"Content-Transfer-Encoding: 8bit\n"
+
+#. Instead of a literal translation, add your name to the end of the list (separated by a comma).
+#, ignore-inconsistent
+msgid ""
+"_: NAME OF TRANSLATORS\n"
+"Your names"
+msgstr ""
+
+#. Instead of a literal translation, add your email to the end of the list (separated by a comma).
+#, ignore-inconsistent
+msgid ""
+"_: EMAIL OF TRANSLATORS\n"
+"Your emails"
+msgstr ""
+
+#: bondwizard.cpp:61
+msgid "LDAP Bonding Wizard"
+msgstr ""
+
+#: bondwizard.cpp:64
+msgid "Step 1: Introduction"
+msgstr ""
+
+#: bondwizard.cpp:68
+msgid "Step 2: Add New Realm"
+msgstr ""
+
+#: bondwizard.cpp:72
+msgid "Step 3: Bond to New Realm"
+msgstr ""
+
+#: bondwizard.cpp:132
+msgid ""
+"<qt><b>The specified realm is already known to this system.</b><p>If the "
+"realm name is correct, please exit the Wizard and select 'Re-Bond to Realm' "
+"in the LDAP configuration module.</qt>"
+msgstr ""
+
+#: bondwizard.cpp:132
+msgid "Duplicate Realm Entry Detected"
+msgstr ""
+
+#: bondwizard.cpp:155
+msgid ""
+"<p>Are you sure you want to quit the LDAP Bonding Wizard?</p><p>If yes, "
+"click <b>Quit</b> and all changes will be lost.<br>If not, click "
+"<b>Cancel</b> to return and finish your setup.</p>"
+msgstr ""
+
+#: bondwizard.cpp:160
+msgid ""
+"<p>Are you sure you want to quit the LDAP Bonding Wizard?</p><p>If yes, "
+"click <b>Quit</b> and the new realm will remain deactivated pending "
+"bonding.<br>If not, click <b>Cancel</b> to return and finish your setup.</p>"
+msgstr ""
+
+#: bondwizard.cpp:165
+msgid ""
+"<p>Are you sure you want to quit the LDAP Bonding Wizard?</p><p>If not, "
+"click <b>Cancel</b> to return and finish bonding.</p>"
+msgstr ""
+
+#: bondwizard.cpp:168
+msgid "All Changes Will Be Lost"
+msgstr ""
+
+#: bondwizard.cpp:215 ldapbonding.cpp:403
+msgid "<qt><b>Unable to bond to realm!</b><p>Details: %1</qt>"
+msgstr ""
+
+#: bondwizard.cpp:215 ldapbonding.cpp:403
+msgid "Unable to Bond to Realm"
+msgstr ""
+
+#: ldapbonding.cpp:70
+msgid "TDE LDAP Manager"
+msgstr ""
+
+#: ldapbonding.cpp:71
+msgid "TDE LDAP Manager Control Panel Module"
+msgstr ""
+
+#: ldapbonding.cpp:73
+msgid "(c) 2012-2013 Timothy Pearson"
+msgstr ""
+
+#: ldapbonding.cpp:83
+msgid ""
+"<b>Bonded LDAP realms take effect system wide, and require administrator "
+"access to modify</b><br>To alter the system's bonded LDAP realms, click on "
+"the \"Administrator Mode\" button below."
+msgstr ""
+
+#: ldapbonding.cpp:191
+msgid "Bonded"
+msgstr ""
+
+#: ldapbonding.cpp:191
+msgid "Deactivated"
+msgstr ""
+
+#: ldapbonding.cpp:234 ldapbonding.cpp:244 ldapbonding.cpp:249
+#: ldapbonding.cpp:254 ldapbonding.cpp:259 ldapbonding.cpp:264
+msgid "<qt><b>Unable to save configuration!</b><p>Details: %2</qt>"
+msgstr ""
+
+#: ldapbonding.cpp:234 ldapbonding.cpp:244 ldapbonding.cpp:249
+#: ldapbonding.cpp:254 ldapbonding.cpp:259 ldapbonding.cpp:264
+msgid "Unable to Save Configuration"
+msgstr ""
+
+#: ldapbonding.cpp:284
+msgid ""
+"<qt><b>Unable to obtain root certificate for realm %1!</b><p>Details: %2</qt>"
+msgstr ""
+
+#: ldapbonding.cpp:284
+msgid "Unable to Obtain Certificate"
+msgstr ""
+
+#: ldapbonding.cpp:288
+msgid ""
+"<qt><b>Unable to install root CA certificate for realm %1!</b><p>Details: "
+"%2</qt>"
+msgstr ""
+
+#: ldapbonding.cpp:288
+msgid "Unable to Install Root CA"
+msgstr ""
+
+#: ldapbonding.cpp:293
+msgid "<qt><b>Unable to obtain root CRL for realm %1!</b><p>Details: %2</qt>"
+msgstr ""
+
+#: ldapbonding.cpp:293
+msgid "Unable to Obtain CRL"
+msgstr ""
+
+#: ldapbonding.cpp:407 ldapbonding.cpp:446
+msgid "<qt><b>Unable to unbond from realm!</b><p>%1</qt>"
+msgstr ""
+
+#: ldapbonding.cpp:407 ldapbonding.cpp:446
+msgid "Unable to Unbond from Realm"
+msgstr ""
+
+#: ldapbonding.cpp:435
+msgid ""
+"Please provide LDAP realm administrator credentials below to complete the "
+"unbonding process"
+msgstr ""
+
+#: ldapbonding.cpp:472
+msgid "This module configures which LDAP realms TDE uses for authentication."
+msgstr ""
+
+#: ldappasswddlg.cpp:35
+msgid "LDAP Authentication"
+msgstr ""
+
+#: ldapconfigbase.ui:157 realmpropertiesdialog.cpp:35
+#, no-c-format
+msgid "Realm Properties"
+msgstr ""
+
+#: bondfinishpagedlg.ui:47
+#, no-c-format
+msgid "<h3>You're almost done!</h3>"
+msgstr ""
+
+#: bondfinishpagedlg.ui:55
+#, no-c-format
+msgid ""
+"Please provide LDAP realm administrator credentials below to complete the "
+"bonding process"
+msgstr ""
+
+#: bondfinishpagedlg.ui:63
+#, no-c-format
+msgid "Username"
+msgstr ""
+
+#: bondfinishpagedlg.ui:76
+#, no-c-format
+msgid "Password"
+msgstr ""
+
+#: bondfinishpagedlg.ui:89
+#, no-c-format
+msgid "LDAP Realm"
+msgstr ""
+
+#: bondintropagedlg.ui:55
+#, no-c-format
+msgid "<h3>Welcome to the TDE LDAP Bonding Wizard!</h3>"
+msgstr ""
+
+#: bondintropagedlg.ui:71
+#, no-c-format
+msgid ""
+"<p>This Wizard will help you bond your machine to an LDAP realm in three "
+"quick, easy steps.</p>\n"
+"\t\t\t\t\t<p>Please note that you will need administrative access to the "
+"LDAP realm you will be bonding with.</p>\n"
+"\t\t\t\t\t<p>If you wish to quit the Wizard, click <b>Cancel</b> at any "
+"time.</p>"
+msgstr ""
+
+#: bondrealmpagedlg.ui:55
+#, no-c-format
+msgid "Basic Realm Information (required)"
+msgstr ""
+
+#: bondrealmpagedlg.ui:66
+#, no-c-format
+msgid "Realm Name"
+msgstr ""
+
+#: bondrealmpagedlg.ui:79
+#, no-c-format
+msgid "Key Distribution Server [KDC]"
+msgstr ""
+
+#: bondrealmpagedlg.ui:92 bondrealmpagedlg.ui:124
+#, no-c-format
+msgid "port"
+msgstr ""
+
+#: bondrealmpagedlg.ui:111
+#, no-c-format
+msgid "Administration Server"
+msgstr ""
+
+#: bondrealmpagedlg.ui:143
+#, no-c-format
+msgid "UID offset"
+msgstr ""
+
+#: bondrealmpagedlg.ui:168
+#, no-c-format
+msgid "GID offset"
+msgstr ""
+
+#: bondrealmpagedlg.ui:195
+#, no-c-format
+msgid "Realm Domain Aliases (optional)"
+msgstr ""
+
+#: bondrealmpagedlg.ui:206
+#, no-c-format
+msgid "Enter each domain alias on a new line below"
+msgstr ""
+
+#: bondrealmpagedlg.ui:221
+#, no-c-format
+msgid "Advanced PKInit Settings (optional)"
+msgstr ""
+
+#: bondrealmpagedlg.ui:232
+#, no-c-format
+msgid "Require EKU"
+msgstr ""
+
+#: bondrealmpagedlg.ui:240
+#, no-c-format
+msgid "Require KRB TGT Other Name"
+msgstr ""
+
+#: bondrealmpagedlg.ui:248
+#, no-c-format
+msgid "Windows 2000 Compatibility"
+msgstr ""
+
+#: bondrealmpagedlg.ui:256
+#, no-c-format
+msgid "Require Windows 2000 Binding"
+msgstr ""
+
+#: ldapconfigbase.ui:31
+#, no-c-format
+msgid "LDAP Realms"
+msgstr ""
+
+#: ldapconfigbase.ui:42
+#, no-c-format
+msgid "Global Settings"
+msgstr ""
+
+#: ldapconfigbase.ui:53
+#, no-c-format
+msgid "&Enable LDAP Realm Support"
+msgstr ""
+
+#: ldapconfigbase.ui:61
+#, no-c-format
+msgid "Fully Qualified Domain Name"
+msgstr ""
+
+#: ldapconfigbase.ui:84
+#, no-c-format
+msgid "Realm Bonding"
+msgstr ""
+
+#: ldapconfigbase.ui:93
+#, no-c-format
+msgid "Status"
+msgstr ""
+
+#: ldapconfigbase.ui:104
+#, no-c-format
+msgid "Name"
+msgstr ""
+
+#: ldapconfigbase.ui:125
+#, no-c-format
+msgid "Bond to New Realm"
+msgstr ""
+
+#: ldapconfigbase.ui:133
+#, no-c-format
+msgid "Re-Bond to Realm"
+msgstr ""
+
+#: ldapconfigbase.ui:141
+#, no-c-format
+msgid "Deactivate Bond to Realm"
+msgstr ""
+
+#: ldapconfigbase.ui:149
+#, no-c-format
+msgid "Remove Realm"
+msgstr ""
+
+#: ldapconfigbase.ui:186
+#, no-c-format
+msgid "LDAP Globals"
+msgstr ""
+
+#: ldapconfigbase.ui:197
+#, no-c-format
+msgid "Kerberos Default Settings"
+msgstr ""
+
+#: ldapconfigbase.ui:208
+#, no-c-format
+msgid "Default Realm"
+msgstr ""
+
+#: ldapconfigbase.ui:229
+#, no-c-format
+msgid "Ticket Lifetime (seconds)"
+msgstr ""
+
+#: ldapconfigbase.ui:258
+#, no-c-format
+msgid "LDAP Connection Parameters"
+msgstr ""
+
+#: ldapconfigbase.ui:269
+#, no-c-format
+msgid "LDAP Version"
+msgstr ""
+
+#: ldapconfigbase.ui:296
+#, no-c-format
+msgid "Time Limit (seconds)"
+msgstr ""
+
+#: ldapconfigbase.ui:323
+#, no-c-format
+msgid "Binding Policy"
+msgstr ""
+
+#: ldapconfigbase.ui:340
+#, no-c-format
+msgid "soft"
+msgstr ""
+
+#: ldapconfigbase.ui:345
+#, no-c-format
+msgid "hard"
+msgstr ""
+
+#: ldapconfigbase.ui:354
+#, no-c-format
+msgid "Binding Time Limit (seconds)"
+msgstr ""
+
+#: ldapconfigbase.ui:381
+#, no-c-format
+msgid "Password Hash"
+msgstr ""
+
+#: ldapconfigbase.ui:398
+#, no-c-format
+msgid "exop"
+msgstr ""
+
+#: ldapconfigbase.ui:403
+#, no-c-format
+msgid "md5"
+msgstr ""
+
+#: ldapconfigbase.ui:412
+#, no-c-format
+msgid "Ignored Users"
+msgstr ""
+
+#: ldapconfigbase.ui:435
+#, no-c-format
+msgid "Authentication Settings"
+msgstr ""
+
+#: ldapconfigbase.ui:446
+#, no-c-format
+msgid "&Create home directory on first logon"
+msgstr ""
+
+#: ldapconfigbase.ui:454
+#, no-c-format
+msgid "&Enable logon credentials cache"
+msgstr ""
+
+#: ldapconfigbase.ui:462
+#, no-c-format
+msgid "&Enable PKCS#11 card login"
+msgstr ""
+
+#: ldapconfigbase.ui:470
+#, no-c-format
+msgid "Home directory mode creation mask"
+msgstr ""
+
+#: ldapconfigbase.ui:500
+#, no-c-format
+msgid "Home directory skeleton location"
+msgstr ""
+
+#: ldapconfigbase.ui:516
+#, no-c-format
+msgid "PKCS#11 certificate slot"
+msgstr ""