Re: Smart Card

From: Anand Abhyankar [MS] (ananda_at_online.microsoft.com)
Date: 10/20/04 

Date: Wed, 20 Oct 2004 11:32:31 -0700

Hi Curt,

I don't know if that is the issue however you can configure the CRL location
in the CA snapin.
Check the following for details:
http://www.microsoft.com/technet/prodtechnol/windowsserver2003/technologies/security/ws3pkibp.mspx#EHAA 

-- 
Thanks,
Anand Abhyankar [MS]
----
This posting is provided "AS IS" with no warranties, and confers no rights.
"Curt Shaffer" <curt@chilitech.net> wrote in message 
news:BD9C244E.C90%curt@chilitech.net...
> We have a Enterprise Root CA in place and need to get smart cards working.
> The certificates are installing on the cards but when the user tries to 
> log
> in we get the error: Revocation function unable to check revocation for 
> the
> certificate. I noticed that the revocation was pointing to (ex.
> DC.domain.com/certsrv/dc.cer) but the revocation list is located at
> dc.domain.com:8080/certsrv/dc.cer. We have a billing system that is 
> running
> on this dc (donšt ask me why, I hate the idea ;)) that runs on port 80 and
> does not allow anything else to use that port. First of all: Could this be
> the issue? Secondly: Is there a way to change the port in the cert to 
> 8080?
>
> Thanks!
>
> Curt
>

Relevant Pages

  • Smart Card
    ... We have a Enterprise Root CA in place and need to get smart cards working. ... The certificates are installing on the cards but when the user tries to log ... Revocation function unable to check revocation for the ... does not allow anything else to use that port. ...
    (microsoft.public.win2000.security)
  • Re: [Full-Disclosure] PGP vs. certificate from Verisign
    ... PGP vs. certificate from Verisign ... > that IE had no way of checking the revocation status, ... "The certificates could be used to sign programs, ActiveX controls, Office ... current Certificate Revocation List (CRL). ...
    (Full-Disclosure)
  • Re: Error issuing certificates from WS03 cert svc
    ... Your problem was the removal of the revoked certificates. ... The revocation function was unable to ... The request was for <here comes specific cert subject info>. ... All certs are likewise published on the web server ...
    (microsoft.public.windows.server.security)
  • Re: Possible to override CDP in Certificate?
    ... > 1) The revocation checking code I refer to is part of CryptoAPI. ... Do not modify the certificates ... >> the Intermediate Certification Authorities store? ...
    (microsoft.public.platformsdk.security)
  • Re: Using EFS on a server shared drive
    ... Windows XP performs revocation checking on all certificates for other users ... I want multiple users to share an encrypted file on a File server using ...
    (microsoft.public.windows.server.active_directory)