Re: Revocation error when logging onto a Win2k domain with a smartcard

From: Tim Springston [MSFT] (tspring_at_online.microsoft.com)
Date: 07/27/04 

Date: Tue, 27 Jul 2004 16:36:06 -0500

Hi Dave-

>From the machine where you see this error can you reach the specified CRL?
CRLs are commonly HTTP URLs, possibly LDAP ones. If you don't recall the
specific URLs you should be able to find them by opening the Certificates
snapin for the user or machine and opening the specific certificate.

If the certificate is one on the smartcard you may need to use software from
the manufacturer to look at the certificate fields.

The essential idea is to make sur ethat you can get to the CRL from that
client. Please repost and let us know if this helps. 

-- 
Tim Springston
Microsoft Corporation
This posting is provided "AS IS" with no warranties, and confers no rights.
"Dave Heckford" <dheckford@blueyonder.co.uk> wrote in message
news:4b08eb79.0407260443.4f1131e2@posting.google.com...
> Hi,
>
> I'm having quite a few problems with Smartcard logon. Each time I try
> to logon to certain Win2k Professional workstation I get the following
> message:-
> "The revocation function was unable to check revocation
> because the revocation server was offline"
>
> To elimate sites I have moved a workstation that has this problem from
> one site to another but the problem persists. I have removed the
> workstation from the domain and re-added it back in, No difference. So
> far all I know is if you use ctrl+alt+del everything is OK but as soon
> as you use a smartcard I keep getting the error message.
>
> As far as I'm aware the CRL's are replicating around the domain
> controllers fine and are updating without user intervention. If anyone
> can help or suggest any ideas that I can try I'd be very greatful.
>
> Thanks,
>
> Dave

Relevant Pages