Security
Given a standalone CA, I want to specify distribution points for the CRL. No matter what I try, it will only publish the CRL to its default location, %systemroot%\system32\CertSrv\CertEnroll.
I thought about a syntax error, but I have no error messages whatsoever. Any ideas? Thanks!
To specify certificate revocation list distribution points in issued certificates
Log on to the system as an Administrator.
Open Certification Authority
In the console tree, click the certification authority.
Where
Certification Authority (where)
CA name
On the Action menu click Properties.
On the Policy Module tab, click Configure.
On the X.509 Extensions tab, under CRL Distribution Points, specify the distribution points.
----------
To Add a new certificate revocation list (CRL) distribution point.
Add a new certificate revocation list (CRL) distribution point.
----------
The preceding is from a Microsoft article on that subject. See this link for the entire article, more options, and additional related links:
(REMOVE SPACES from the pasted URL.)
Maxwell
.
.
Possibly helpful links:
http://www.jsiinc.com/SUBH/tip3800/rh3853.htm
http://support.3com.com/infodeli/tools/bridrout/u_guides/html/eos114/family/ref/pki8.htm
Good luck,
Maxwell
by adrian c
Thanks for the quick answer, this is what MS says and it doesn't work (the 3com link doesn't work either).
The only thing that seems to do something is using a CAPolicy.inf file, but this implies reinstalling the CA all over again, not much of an usable solution.
by adrian c
by adrian c
"This behaviour is by design".
Actually writting the CRL file anywhere else has to be done by other means.
by adrian c
This discussion is closed to new replies.
Sort by Trending